General
- Target 2026-08-21_7512b2a5be500bd6b0a1bd253f0ef6b9_coinminer_elex_upatre_wannacry
- Size 29KB
- Sample260822-psfmcayxgy
- SHA256 2378214ab1fc3eaf54e065972e448b3310d3c8aaa64cbf1b94b5f6d561869c65
- MD5 7512b2a5be500bd6b0a1bd253f0ef6b9
- SHA1 210411194789a937ffec9270eac4194cdf7e5e83
- SHA512 25351b9a256910db0e43b292b4ce6ad7429f0850fe321be7bef2983422ec7581470a588b8ddeda505aff42fe9fd3e3489cd5a7d6dd36e799f816100f9c60a1de
- SSDEEP 384:LLz3qWcd5DUVQQ4oM+JKcMef9YlWRhQIUY/FYHZxgO8vixamynIsfRsTJ:Xz3qWc7Re1Jen6hpFwxgOTE5jfKV
- TLSH T17DD2F8DED9C64949C8853F3B92FA5B0090189E1D87A456EBE9A4FC438D7E2C14C31D9C
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-21_7512b2a5be500bd6b0a1bd253f0ef6b9_coinminer_elex_upatre_wannacry.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_7512b2a5be500bd6b0a1bd253f0ef6b9_coinminer_elex_upatre_wannacry
- Size 29KB
- SHA256 2378214ab1fc3eaf54e065972e448b3310d3c8aaa64cbf1b94b5f6d561869c65
- MD5 7512b2a5be500bd6b0a1bd253f0ef6b9
- SHA1 210411194789a937ffec9270eac4194cdf7e5e83
- SHA512 25351b9a256910db0e43b292b4ce6ad7429f0850fe321be7bef2983422ec7581470a588b8ddeda505aff42fe9fd3e3489cd5a7d6dd36e799f816100f9c60a1de
- SSDEEP 384:LLz3qWcd5DUVQQ4oM+JKcMef9YlWRhQIUY/FYHZxgO8vixamynIsfRsTJ:Xz3qWc7Re1Jen6hpFwxgOTE5jfKV
- TLSH T17DD2F8DED9C64949C8853F3B92FA5B0090189E1D87A456EBE9A4FC438D7E2C14C31D9C
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE