General
- Target 2026-08-21_6373bb460d3fe3dba783558f39ce5136_coinminer_darpapox_elex_nymaim_rhadamanthys_wannacry
- Size 4.9MB
- Sample260821-m2c7gaba47
- SHA256 3c363748199f512bf860960426e9d4141467ed0845f5ed0c88dd0ad0dbd71189
- MD5 6373bb460d3fe3dba783558f39ce5136
- SHA1 05d9af9765488ba66d0c0e0068bdfc737f1003cd
- SHA512 7c1cc769783740f703ae2a5c96bd2fb321ce7ef9b738bd3fe0c14dca630fb6989e464516a59ab8abb06eb6974dcfcc65ca4229cdd6289c9078322e404a8afe25
- SSDEEP 98304:+PC/qwDCHo7AWInB1s9vzpx56hxvWbrtUTrUHOi:+PiDCHo7AWInB1s9vzpx8x+NcIOi
- TLSH T10D367B136E49F882F703C4709CBCAE7D14F27D253252598763C4BE6D91BA7A760A930B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-21_6373bb460d3fe3dba783558f39ce5136_coinminer_darpapox_elex_nymaim_rhadamanthys_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-21_6373bb460d3fe3dba783558f39ce5136_coinminer_darpapox_elex_nymaim_rhadamanthys_wannacry.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_6373bb460d3fe3dba783558f39ce5136_coinminer_darpapox_elex_nymaim_rhadamanthys_wannacry
- Size 4.9MB
- SHA256 3c363748199f512bf860960426e9d4141467ed0845f5ed0c88dd0ad0dbd71189
- MD5 6373bb460d3fe3dba783558f39ce5136
- SHA1 05d9af9765488ba66d0c0e0068bdfc737f1003cd
- SHA512 7c1cc769783740f703ae2a5c96bd2fb321ce7ef9b738bd3fe0c14dca630fb6989e464516a59ab8abb06eb6974dcfcc65ca4229cdd6289c9078322e404a8afe25
- SSDEEP 98304:+PC/qwDCHo7AWInB1s9vzpx56hxvWbrtUTrUHOi:+PiDCHo7AWInB1s9vzpx8x+NcIOi
- TLSH T10D367B136E49F882F703C4709CBCAE7D14F27D253252598763C4BE6D91BA7A760A930B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Drops file in System32 directory