General
- Target 2026-09-04_445062425f1b866fa542357b62424ad5_coinminer_driverpack_elex_wannacry
- Size 1.7MB
- Sample260905-pr7pfa1yet
- SHA256 e1322571ad926f466774917716c3d31a30777d40f7edde1a185cd0253fb076a3
- MD5 445062425f1b866fa542357b62424ad5
- SHA1 167a16a6a5ad014b4e59ea75da5d06cae1871398
- SHA512 12fb17222ad19eec248c5c940f0abbc51a46159fbad0167965f6237357e5a21496c69048595aee58221f2c8db5be8fdd426d09aef416dc79da184c131293c71c
- SSDEEP 24576:k53uhFjYRb/tvtqICg0F6pt0hy9/VgEdpu5juNAR8FiFHirEbK8UCPacch/aR3lv:k5+hFjC7KBFmiY9VujBK7x9kK/affoSb
- TLSH T18A852321B7A741B5C9E32630A510B76A12BFED110F291AD75E603A135D338E7EE7C6C2
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-04_445062425f1b866fa542357b62424ad5_coinminer_driverpack_elex_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-04_445062425f1b866fa542357b62424ad5_coinminer_driverpack_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-04_445062425f1b866fa542357b62424ad5_coinminer_driverpack_elex_wannacry
- Size 1.7MB
- SHA256 e1322571ad926f466774917716c3d31a30777d40f7edde1a185cd0253fb076a3
- MD5 445062425f1b866fa542357b62424ad5
- SHA1 167a16a6a5ad014b4e59ea75da5d06cae1871398
- SHA512 12fb17222ad19eec248c5c940f0abbc51a46159fbad0167965f6237357e5a21496c69048595aee58221f2c8db5be8fdd426d09aef416dc79da184c131293c71c
- SSDEEP 24576:k53uhFjYRb/tvtqICg0F6pt0hy9/VgEdpu5juNAR8FiFHirEbK8UCPacch/aR3lv:k5+hFjC7KBFmiY9VujBK7x9kK/affoSb
- TLSH T18A852321B7A741B5C9E32630A510B76A12BFED110F291AD75E603A135D338E7EE7C6C2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Modifies Windows Firewall
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
MITRE ATT&CK Enterprise v16
Persistence
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Privilege Escalation
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1