General
- Target 2026-08-21_80c86597a034aa4a9a5b1a62b6b87195_coinminer_darpapox_elex_nymaim_rhadamanthys_wannacry
- Size 2.2MB
- Sample260821-ms17yaybmb
- SHA256 8cde8b5e5e66920ae871e1936edc54e727c7e866bb5b03c3b6b3441da066dbc3
- MD5 80c86597a034aa4a9a5b1a62b6b87195
- SHA1 b42de06710e633c5fcb6b14a2519b1f4e393aa93
- SHA512 5b1920f998b919c7771bf1e99f6d62aebd6ef6c014c5d935bbefd1fbf9449d9143e887313a46a7d83a93c13cf7c3c8cd99bdbddad9e8d1c3a5dd6a7fe6f79906
- SSDEEP 49152:W8cGbakx1xNbTChxKCnFnQXBbrtgb/iQvu0UHOD:qGuw1xN6hxvWbrtUTrUHOD
- TLSH T1BCB5DF1267E5C821F3BBD63197F51E747A7BB9213B36C80A1B8454381AF1E5AD7B0322
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-21_80c86597a034aa4a9a5b1a62b6b87195_coinminer_darpapox_elex_nymaim_rhadamanthys_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-21_80c86597a034aa4a9a5b1a62b6b87195_coinminer_darpapox_elex_nymaim_rhadamanthys_wannacry.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_80c86597a034aa4a9a5b1a62b6b87195_coinminer_darpapox_elex_nymaim_rhadamanthys_wannacry
- Size 2.2MB
- SHA256 8cde8b5e5e66920ae871e1936edc54e727c7e866bb5b03c3b6b3441da066dbc3
- MD5 80c86597a034aa4a9a5b1a62b6b87195
- SHA1 b42de06710e633c5fcb6b14a2519b1f4e393aa93
- SHA512 5b1920f998b919c7771bf1e99f6d62aebd6ef6c014c5d935bbefd1fbf9449d9143e887313a46a7d83a93c13cf7c3c8cd99bdbddad9e8d1c3a5dd6a7fe6f79906
- SSDEEP 49152:W8cGbakx1xNbTChxKCnFnQXBbrtgb/iQvu0UHOD:qGuw1xN6hxvWbrtUTrUHOD
- TLSH T1BCB5DF1267E5C821F3BBD63197F51E747A7BB9213B36C80A1B8454381AF1E5AD7B0322
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Drops file in System32 directory