2026-08-20_7de9503c406ab6d0fcaec1114b7c4da6_elex_nymaim_rhadamanthys_wannacry

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-20_7de9503c406ab6d0fcaec1114b7c4da6_elex_nymaim_rhadamanthys_wannacry
Size 52KB
Sample260820-hvmecagj51
SHA256 5bed3022c37954375c2955724e21fb8661e8723c4787d6935187be94a4a6d9fa
MD5 7de9503c406ab6d0fcaec1114b7c4da6
SHA1 1a408dce45539aa9037211b5a98be550543ad643
SHA512 70132a302c164a6a206d3f69885e3ba9321791b47de5c8a17691dc795fa29690957a1470c110d012f001c1c49238600b49b34c604f5a21e25157924e7361660b
SSDEEP 768:FlQ4hrvaEGU4aikqykezg2XpfY+jYioRolLVl5:fLhE1Dezg2ZfYroRD5
TLSH
T118337C13B9ED05B3DD518EB115BB0B376B3BB9120651118BAF08DD9E3DB22849D2237B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-20_7de9503c406ab6d0fcaec1114b7c4da6_elex_nymaim_rhadamanthys_wannacry

File Explorer

2026-08-20_7de9503c406ab6d0fcaec1114b7c4da6_elex_nymaim_rhadamanthys_wannacry

.exe 52KB

2026-08-20_7de9503c406ab6d0fcaec1114b7c4da6_elex_nymaim_rhadamanthys_wannacry

IMPHASH 12a30b523ac71a3cbe9145c89400dd7f
SHA256 5bed3022c37954375c2955724e21fb8661e8723c4787d6935187be94a4a6d9fa
MD5 7de9503c406ab6d0fcaec1114b7c4da6
SHA1 1a408dce45539aa9037211b5a98be550543ad643
SHA512 70132a302c164a6a206d3f69885e3ba9321791b47de5c8a17691dc795fa29690957a1470c110d012f001c1c49238600b49b34c604f5a21e25157924e7361660b
SSDEEP 768:FlQ4hrvaEGU4aikqykezg2XpfY+jYioRolLVl5:fLhE1Dezg2ZfYroRD5
TLSH
T118337C13B9ED05B3DD518EB115BB0B376B3BB9120651118BAF08DD9E3DB22849D2237B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

25298

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

4KB

Virtual Size

440B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.text

Size

20KB

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

2026-08-20_7de9503c406ab6d0fcaec1114b7c4da6_elex_nymaim_rhadamanthys_wannacry

kernel32

user32

generic