General
- Target 2026-08-20_ce7a926e2e6702edb61fbd38fb0193f3_coinminer_darpapox_elex_nymaim_rhadamanthys_wannacry
- Size 2.7MB
- Sample260820-rt9b6asths
- SHA256 60e33c5382a8bf4844f28e09386b7151aa3d2118d8819f0bc069db1b67fa99fb
- MD5 ce7a926e2e6702edb61fbd38fb0193f3
- SHA1 e3babac95cbd57cc6e34430334572ef4f3a3a77d
- SHA512 cf3838fac560d769c8eb9a9bf6ccb61e0fbbdd7a7ea2e401d567df6da5ab4509ec8ddef80251e093cd924e4f7bd212299fa8b1ed7cb10e06d56e791f4392d9f1
- SSDEEP 49152:hAOCsq5YbErLkCejJDNbTChxKCnFnQXBbrtgb/iQvu0UHOt:MYbEijFN6hxvWbrtUTrUHOt
- TLSH T116D5CF002E01C962DA5F84F465FB4DB851777E007B66E4D3F66862B21FB0B8BD3B6249
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-20_ce7a926e2e6702edb61fbd38fb0193f3_coinminer_darpapox_elex_nymaim_rhadamanthys_wannacry.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_ce7a926e2e6702edb61fbd38fb0193f3_coinminer_darpapox_elex_nymaim_rhadamanthys_wannacry.exe
Resource
win11ltsc2024-20260710-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_ce7a926e2e6702edb61fbd38fb0193f3_coinminer_darpapox_elex_nymaim_rhadamanthys_wannacry
- Size 2.7MB
- SHA256 60e33c5382a8bf4844f28e09386b7151aa3d2118d8819f0bc069db1b67fa99fb
- MD5 ce7a926e2e6702edb61fbd38fb0193f3
- SHA1 e3babac95cbd57cc6e34430334572ef4f3a3a77d
- SHA512 cf3838fac560d769c8eb9a9bf6ccb61e0fbbdd7a7ea2e401d567df6da5ab4509ec8ddef80251e093cd924e4f7bd212299fa8b1ed7cb10e06d56e791f4392d9f1
- SSDEEP 49152:hAOCsq5YbErLkCejJDNbTChxKCnFnQXBbrtgb/iQvu0UHOt:MYbEijFN6hxvWbrtUTrUHOt
- TLSH T116D5CF002E01C962DA5F84F465FB4DB851777E007B66E4D3F66862B21FB0B8BD3B6249
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Drops file in System32 directory