General
- Target 2026-08-25_bed13aadac336a29717273784f57d964_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry
- Size 1.7MB
- Sample260826-nhermacp5t
- SHA256 d7f00a44b01ec7575c5ffe2f8e557e81767e01679565753c134eb50ac0db76c7
- MD5 bed13aadac336a29717273784f57d964
- SHA1 adab4e3326a794dd0dcab5946fcb43e7ec34bedb
- SHA512 03b34805cf38792186cfafccbbf6ad7b87956807b54164bdd4a9564ba572c8b574d5f874f81365d9663435413ade0519b93db813f39c10608da0692c3ad6dba9
- SSDEEP 24576:OXdVtTj2i64T+jdxQCfgOFD3WSwd2QtBBw6xxhVxQtmibjOhZaiRu/4oMaop0UNQ:mbTChxKCnFnQXBbrtgb/iQvu0UHOP
- TLSH T19C85F0152790CDA1F36FC07283E56E79B5B329213733D886AE4855312BF2E2FE781196
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-25_bed13aadac336a29717273784f57d964_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-25_bed13aadac336a29717273784f57d964_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry.exe
Resource
win11ltsc2024-20260710-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-25_bed13aadac336a29717273784f57d964_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry
- Size 1.7MB
- SHA256 d7f00a44b01ec7575c5ffe2f8e557e81767e01679565753c134eb50ac0db76c7
- MD5 bed13aadac336a29717273784f57d964
- SHA1 adab4e3326a794dd0dcab5946fcb43e7ec34bedb
- SHA512 03b34805cf38792186cfafccbbf6ad7b87956807b54164bdd4a9564ba572c8b574d5f874f81365d9663435413ade0519b93db813f39c10608da0692c3ad6dba9
- SSDEEP 24576:OXdVtTj2i64T+jdxQCfgOFD3WSwd2QtBBw6xxhVxQtmibjOhZaiRu/4oMaop0UNQ:mbTChxKCnFnQXBbrtgb/iQvu0UHOP
- TLSH T19C85F0152790CDA1F36FC07283E56E79B5B329213733D886AE4855312BF2E2FE781196
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Drops file in System32 directory