General
- Target 2026-08-20_d3f08372f6f58f23f07b5d70a703da0c_coinminer_darpapox_elex_nymaim_rhadamanthys_wannacry
- Size 2.2MB
- Sample260820-rsefdsdp7y
- SHA256 2bdefa92ba1709a0807a225f0e84f75a4b1c6bc435323edc7faaf65bd64f4259
- MD5 d3f08372f6f58f23f07b5d70a703da0c
- SHA1 8c437794c6fa99d4e6f31dd3b7639065fecba8c8
- SHA512 f559c6fe8241d3c05a1b8dd85599859be57b50fe96fae2a4d31a0fb1ac0ff34be0777717ace5a7e412af9c321169a2f420f15dcf59248e8fbb08e15aae9c4fad
- SSDEEP 49152:qG6MHJbTChxKCnFnQXBbrtgb/iQvu0UHOU:ZBHJ6hxvWbrtUTrUHOU
- TLSH T15DA5E0001B68CD90FA6FC93643E12E7170376C2973A6CE519E9C397157F0EDAE7849A2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-20_d3f08372f6f58f23f07b5d70a703da0c_coinminer_darpapox_elex_nymaim_rhadamanthys_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_d3f08372f6f58f23f07b5d70a703da0c_coinminer_darpapox_elex_nymaim_rhadamanthys_wannacry.exe
Resource
win11ltsc2024-20260710-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_d3f08372f6f58f23f07b5d70a703da0c_coinminer_darpapox_elex_nymaim_rhadamanthys_wannacry
- Size 2.2MB
- SHA256 2bdefa92ba1709a0807a225f0e84f75a4b1c6bc435323edc7faaf65bd64f4259
- MD5 d3f08372f6f58f23f07b5d70a703da0c
- SHA1 8c437794c6fa99d4e6f31dd3b7639065fecba8c8
- SHA512 f559c6fe8241d3c05a1b8dd85599859be57b50fe96fae2a4d31a0fb1ac0ff34be0777717ace5a7e412af9c321169a2f420f15dcf59248e8fbb08e15aae9c4fad
- SSDEEP 49152:qG6MHJbTChxKCnFnQXBbrtgb/iQvu0UHOU:ZBHJ6hxvWbrtUTrUHOU
- TLSH T15DA5E0001B68CD90FA6FC93643E12E7170376C2973A6CE519E9C397157F0EDAE7849A2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Drops file in System32 directory