General
- Target 2026-08-24_5c9d15227bd8d8b5a8010cccb1ee5dac_coinminer_elex_emotet_jaku_nymaim_rhadamanthys_wannacry
- Size 1.2MB
- Sample260825-prfkysywfx
- SHA256 a6bc890881afce03568ded90d43acc62dd527f38a57c160febab443f7ed64a0f
- MD5 5c9d15227bd8d8b5a8010cccb1ee5dac
- SHA1 69a828e180c5ca01e3d99b46b3a709c40de83fea
- SHA512 c1342e5798b0ef1bbf9e452e155446e22421389f8b0d420ffe3a6d3b5086936b59013e831bfc50b8dd33e78585c8fa45fa14f2638fa7372e53c3e2b44706312f
- SSDEEP 24576:r9n8UjFxPTSiVoNGRzatThRiVNbLGJv6plFh9iGa2oMYMgdsHGeP:x8gVTSmow8TjFJspDLoVMgdkLP
- TLSH T1CD55DF127790CCB2F35FC1324AC16F35B27766202B33CD476B888A3D5AF195AE7A2651
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-24_5c9d15227bd8d8b5a8010cccb1ee5dac_coinminer_elex_emotet_jaku_nymaim_rhadamanthys_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-24_5c9d15227bd8d8b5a8010cccb1ee5dac_coinminer_elex_emotet_jaku_nymaim_rhadamanthys_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-24_5c9d15227bd8d8b5a8010cccb1ee5dac_coinminer_elex_emotet_jaku_nymaim_rhadamanthys_wannacry
- Size 1.2MB
- SHA256 a6bc890881afce03568ded90d43acc62dd527f38a57c160febab443f7ed64a0f
- MD5 5c9d15227bd8d8b5a8010cccb1ee5dac
- SHA1 69a828e180c5ca01e3d99b46b3a709c40de83fea
- SHA512 c1342e5798b0ef1bbf9e452e155446e22421389f8b0d420ffe3a6d3b5086936b59013e831bfc50b8dd33e78585c8fa45fa14f2638fa7372e53c3e2b44706312f
- SSDEEP 24576:r9n8UjFxPTSiVoNGRzatThRiVNbLGJv6plFh9iGa2oMYMgdsHGeP:x8gVTSmow8TjFJspDLoVMgdkLP
- TLSH T1CD55DF127790CCB2F35FC1324AC16F35B27766202B33CD476B888A3D5AF195AE7A2651
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application