General
- Target 2026-08-21_fcf449143988ea1fb7b27db5ac0b507d_coinminer_darpapox_elex_emotet_jaku_nymaim_rhadamanthys_wannacry
- Size 1.9MB
- Sample260821-lnp4fa1yet
- SHA256 8cc732d262e0194f304384e89d323bda7d93c10b0b109508157d5d6f3ab9200e
- MD5 fcf449143988ea1fb7b27db5ac0b507d
- SHA1 3501a0d8ad759172972e7270635f7d857687363e
- SHA512 57c1e090390800671b0dd54a3739da635c1133f14ccd9316215ec0af64fae07e3d53441381b1b6f0cc66db27bfebcff33ec99a919d7a53439441130bde847d46
- SSDEEP 49152:E/BbFbTChxKCnFnQXBbrtgb/iQvu0UHOI:E/dF6hxvWbrtUTrUHOI
- TLSH T1F195DE122790CDA1F36FC57283E16E79B6B3A9213B33CD466A4841392BF1E1FD791252
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-21_fcf449143988ea1fb7b27db5ac0b507d_coinminer_darpapox_elex_emotet_jaku_nymaim_rhadamanthys_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-21_fcf449143988ea1fb7b27db5ac0b507d_coinminer_darpapox_elex_emotet_jaku_nymaim_rhadamanthys_wannacry.exe
Resource
win11ltsc2024-20260710-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_fcf449143988ea1fb7b27db5ac0b507d_coinminer_darpapox_elex_emotet_jaku_nymaim_rhadamanthys_wannacry
- Size 1.9MB
- SHA256 8cc732d262e0194f304384e89d323bda7d93c10b0b109508157d5d6f3ab9200e
- MD5 fcf449143988ea1fb7b27db5ac0b507d
- SHA1 3501a0d8ad759172972e7270635f7d857687363e
- SHA512 57c1e090390800671b0dd54a3739da635c1133f14ccd9316215ec0af64fae07e3d53441381b1b6f0cc66db27bfebcff33ec99a919d7a53439441130bde847d46
- SSDEEP 49152:E/BbFbTChxKCnFnQXBbrtgb/iQvu0UHOI:E/dF6hxvWbrtUTrUHOI
- TLSH T1F195DE122790CDA1F36FC57283E16E79B6B3A9213B33CD466A4841392BF1E1FD791252
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Drops file in System32 directory