General
- Target 2026-08-20_2bb48e2125afdece71991b485012ca02_coinminer_elex_upatre_wannacry
- Size 29KB
- Sample260820-p927nsde58
- SHA256 034c64b13bf431b8d216ee6feef49deb87570598e8df6a534536df642807443e
- MD5 2bb48e2125afdece71991b485012ca02
- SHA1 e211c1c992c783bc5ba0d0f1518be68fe873b181
- SHA512 0d83fc8d78b8621d8e9e9aa770a13dadb4f0e4b3bb25733a1a005991a743caa134f8b8e4b61fd6cef3c98381f4a1b3474b72f2737a816779aaea8306218b22d8
- SSDEEP 384:LLz3qWcd5DUVQQ4oM+JKcMef9YlWRhQIUY/FYHZxgO8vixamynIsfHsT:Xz3qWc7Re1Jen6hpFwxgOTE5jfM
- TLSH T15ED2E8DED9864989CC853F3B92FE5B1091189E1D87A45AE7E9A4FC438E7E2C14C31C9C
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-20_2bb48e2125afdece71991b485012ca02_coinminer_elex_upatre_wannacry.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_2bb48e2125afdece71991b485012ca02_coinminer_elex_upatre_wannacry
- Size 29KB
- SHA256 034c64b13bf431b8d216ee6feef49deb87570598e8df6a534536df642807443e
- MD5 2bb48e2125afdece71991b485012ca02
- SHA1 e211c1c992c783bc5ba0d0f1518be68fe873b181
- SHA512 0d83fc8d78b8621d8e9e9aa770a13dadb4f0e4b3bb25733a1a005991a743caa134f8b8e4b61fd6cef3c98381f4a1b3474b72f2737a816779aaea8306218b22d8
- SSDEEP 384:LLz3qWcd5DUVQQ4oM+JKcMef9YlWRhQIUY/FYHZxgO8vixamynIsfHsT:Xz3qWc7Re1Jen6hpFwxgOTE5jfM
- TLSH T15ED2E8DED9864989CC853F3B92FE5B1091189E1D87A45AE7E9A4FC438E7E2C14C31C9C
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE