General
- Target 2026-08-20_fd7705bad58fbcd58f0116be5742e1d4_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry
- Size 959KB
- Sample260821-cj16gaeq31
- SHA256 a4ba8218bd6f7999c5a733d524001933eaf823f66fb61db59d76a372d7439e62
- MD5 fd7705bad58fbcd58f0116be5742e1d4
- SHA1 c1530c07e61d7759b6131c2052c7483ee88eefe9
- SHA512 f708e7d4c17e6891c86e4ba9d2fee8e7c4529251ca78c6342146c113c1373c7d8dd62392920c6ea518b2b59f3b20610252ad16eb1d41338368c285dc19c3e452
- SSDEEP 24576:1GRzatThRiVNbLGJv6plFh9iGa2oMYMgdsHG0:o8TjFJspDLoVMgdk3
- TLSH T10F2501197B80CDA1F26FC07286D06F34B6772A202732CD4A6B4895381FF2E5FE792156
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-20_fd7705bad58fbcd58f0116be5742e1d4_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_fd7705bad58fbcd58f0116be5742e1d4_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_fd7705bad58fbcd58f0116be5742e1d4_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry
- Size 959KB
- SHA256 a4ba8218bd6f7999c5a733d524001933eaf823f66fb61db59d76a372d7439e62
- MD5 fd7705bad58fbcd58f0116be5742e1d4
- SHA1 c1530c07e61d7759b6131c2052c7483ee88eefe9
- SHA512 f708e7d4c17e6891c86e4ba9d2fee8e7c4529251ca78c6342146c113c1373c7d8dd62392920c6ea518b2b59f3b20610252ad16eb1d41338368c285dc19c3e452
- SSDEEP 24576:1GRzatThRiVNbLGJv6plFh9iGa2oMYMgdsHG0:o8TjFJspDLoVMgdk3
- TLSH T10F2501197B80CDA1F26FC07286D06F34B6772A202732CD4A6B4895381FF2E5FE792156
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application