General
- Target 2026-08-20_a335ade99d06a03f85c20a29b28e97b0_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry
- Size 1.7MB
- Sample260820-lr42rsce93
- SHA256 1d9c879bf795166bf13d7708aa61155c6be1a342d9e3651534f62786a58b86ae
- MD5 a335ade99d06a03f85c20a29b28e97b0
- SHA1 5bcf96c019f9670c5f859c84ec14cfc9b7f589a1
- SHA512 b4e881de5a5aab5dc17f3e21aa6598050a6954cc4784f133acf5efafb25eaeed774edbd01445daca7bad67d49a3c72d85d0aaba070d242a62e2790206db1efb9
- SSDEEP 24576:OXdVtTj2i64T+jdxQCfgOFD3WSwd2QtBBw6xxhVxQtmibjOhZaiRu/4oMaop0UN9:mbTChxKCnFnQXBbrtgb/iQvu0UHOYN
- TLSH T1EF85EE252790CD61F36FC07643D16E79B9B329213733D886AE4865306BF2E2FE781196
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-20_a335ade99d06a03f85c20a29b28e97b0_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_a335ade99d06a03f85c20a29b28e97b0_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_a335ade99d06a03f85c20a29b28e97b0_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry
- Size 1.7MB
- SHA256 1d9c879bf795166bf13d7708aa61155c6be1a342d9e3651534f62786a58b86ae
- MD5 a335ade99d06a03f85c20a29b28e97b0
- SHA1 5bcf96c019f9670c5f859c84ec14cfc9b7f589a1
- SHA512 b4e881de5a5aab5dc17f3e21aa6598050a6954cc4784f133acf5efafb25eaeed774edbd01445daca7bad67d49a3c72d85d0aaba070d242a62e2790206db1efb9
- SSDEEP 24576:OXdVtTj2i64T+jdxQCfgOFD3WSwd2QtBBw6xxhVxQtmibjOhZaiRu/4oMaop0UN9:mbTChxKCnFnQXBbrtgb/iQvu0UHOYN
- TLSH T1EF85EE252790CD61F36FC07643D16E79B9B329213733D886AE4865306BF2E2FE781196
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Loads dropped DLL
Adds Run key to start application
Drops file in System32 directory