General
- Target 2026-08-27_fd7e135af38667b221ec2cbd1c302c60_coinminer_elex_upatre_wannacry
- Size 29KB
- Sample260828-aearls1vhv
- SHA256 99e39de04528afed879b61c8dc094585b977114f86edfd65df19d38e92bcfde6
- MD5 fd7e135af38667b221ec2cbd1c302c60
- SHA1 1fb0dd8573574c62fcb2f8ff5368e6fd4f6d8541
- SHA512 14b9660c86b1287bd56a67c3ed5a960b7f6eba06c1dccca9b35665f426cddae4b1c246b6b62c84c3bc328c2f1ec97bcf9c7d5f8f6173085600fb6ec7016ed82c
- SSDEEP 384:LLz3qWcd5DUVQQ4oM+JKcMef9YlWRhQIUY/FYHZxgO8vixamynIsfbsT9+:Xz3qWc7Re1Jen6hpFwxgOTE5jf48
- TLSH T1CBD208DEC9C60559C8963F3B92FA5B0090289E1D87655AEBE9A4FC438D7F2C14C31D9C
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-27_fd7e135af38667b221ec2cbd1c302c60_coinminer_elex_upatre_wannacry.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-27_fd7e135af38667b221ec2cbd1c302c60_coinminer_elex_upatre_wannacry
- Size 29KB
- SHA256 99e39de04528afed879b61c8dc094585b977114f86edfd65df19d38e92bcfde6
- MD5 fd7e135af38667b221ec2cbd1c302c60
- SHA1 1fb0dd8573574c62fcb2f8ff5368e6fd4f6d8541
- SHA512 14b9660c86b1287bd56a67c3ed5a960b7f6eba06c1dccca9b35665f426cddae4b1c246b6b62c84c3bc328c2f1ec97bcf9c7d5f8f6173085600fb6ec7016ed82c
- SSDEEP 384:LLz3qWcd5DUVQQ4oM+JKcMef9YlWRhQIUY/FYHZxgO8vixamynIsfbsT9+:Xz3qWc7Re1Jen6hpFwxgOTE5jf48
- TLSH T1CBD208DEC9C60559C8963F3B92FA5B0090289E1D87655AEBE9A4FC438D7F2C14C31D9C
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE