General
- Target 2026-08-23_ac99cd775d9ad2c264c3c7ea0f57ef65_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry
- Size 1.7MB
- Sample260825-2mvwaszdng
- SHA256 634686ad1d299e792f604f92aa009c49dda367c34b08308ea87b84338efe6d17
- MD5 ac99cd775d9ad2c264c3c7ea0f57ef65
- SHA1 2ba1af6ffe80d6f60b6d30da185cdf809dfeedfe
- SHA512 afd9d08de5be90bc9938a5597b80cdc5475395b071e19e68015b9d862250210cd032426d55248afb19cec707b5986338dec4aa81bc701cb64c51501cb57d51fe
- SSDEEP 24576:OXdVtTj2i64T+jdxQCfgOFD3WSwd2QtBBw6xxhVxQtmibjOhZaiRu/4oMaop0UNQ:mbTChxKCnFnQXBbrtgb/iQvu0UHOD
- TLSH T1E085DE252790CD61F36FC07283E56E79B6B329213733D896AE8855312BF2E1FE781095
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-23_ac99cd775d9ad2c264c3c7ea0f57ef65_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-23_ac99cd775d9ad2c264c3c7ea0f57ef65_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-23_ac99cd775d9ad2c264c3c7ea0f57ef65_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry
- Size 1.7MB
- SHA256 634686ad1d299e792f604f92aa009c49dda367c34b08308ea87b84338efe6d17
- MD5 ac99cd775d9ad2c264c3c7ea0f57ef65
- SHA1 2ba1af6ffe80d6f60b6d30da185cdf809dfeedfe
- SHA512 afd9d08de5be90bc9938a5597b80cdc5475395b071e19e68015b9d862250210cd032426d55248afb19cec707b5986338dec4aa81bc701cb64c51501cb57d51fe
- SSDEEP 24576:OXdVtTj2i64T+jdxQCfgOFD3WSwd2QtBBw6xxhVxQtmibjOhZaiRu/4oMaop0UNQ:mbTChxKCnFnQXBbrtgb/iQvu0UHOD
- TLSH T1E085DE252790CD61F36FC07283E56E79B6B329213733D896AE8855312BF2E1FE781095
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Drops file in System32 directory