General
- Target 2026-09-04_952e70bf501c3c31aad72aae7018a58e_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry
- Size 1.7MB
- Sample260905-dhfc2ssvet
- SHA256 ae3646b3e0acc3c85732f3a0999e78a91e8607b93e52263e8529d0ae3a91816c
- MD5 952e70bf501c3c31aad72aae7018a58e
- SHA1 204c002e2e6634f69ca37b06b5fb79b30b8fa3e7
- SHA512 41a79a0da89cb139386ce77894ab9a0f63b9f64cfbc3cbb2e64865d7a286eb9c1cca14c614c987e2bda6bb84b7e47a5d1a95a5d184919ccf980126305e37f3f4
- SSDEEP 24576:OXdVtTj2i64T+jdxQCfgOFD3WSwd2QtBBw6xxhVxQtmibjOhZaiRu/4oMaop0UNi:mbTChxKCnFnQXBbrtgb/iQvu0UHOrT
- TLSH T16285EF152790CDA1F76FC07283E56E79B6B329213733DC866A4855312BF2E2FE381196
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-04_952e70bf501c3c31aad72aae7018a58e_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-04_952e70bf501c3c31aad72aae7018a58e_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-04_952e70bf501c3c31aad72aae7018a58e_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry
- Size 1.7MB
- SHA256 ae3646b3e0acc3c85732f3a0999e78a91e8607b93e52263e8529d0ae3a91816c
- MD5 952e70bf501c3c31aad72aae7018a58e
- SHA1 204c002e2e6634f69ca37b06b5fb79b30b8fa3e7
- SHA512 41a79a0da89cb139386ce77894ab9a0f63b9f64cfbc3cbb2e64865d7a286eb9c1cca14c614c987e2bda6bb84b7e47a5d1a95a5d184919ccf980126305e37f3f4
- SSDEEP 24576:OXdVtTj2i64T+jdxQCfgOFD3WSwd2QtBBw6xxhVxQtmibjOhZaiRu/4oMaop0UNi:mbTChxKCnFnQXBbrtgb/iQvu0UHOrT
- TLSH T16285EF152790CDA1F76FC07283E56E79B6B329213733DC866A4855312BF2E2FE381196
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Drops file in System32 directory