General
- Target 2026-09-03_ccfd34a1ec7b97bd73ccb88b2db3342a_coinminer_elex_hijackloader_wannacry
- Size 7.8MB
- Sample260905-z9v4gazthy
- SHA256 b59ee0de8cc5b641f65b5497575586d9f34e65a99d285aa0c0ec7b24da12d19c
- MD5 ccfd34a1ec7b97bd73ccb88b2db3342a
- SHA1 057a040ab29448671da7767f915ef30376bf773a
- SHA512 624a2691da90a3f8d9d745bb1ed23a1e42db1a5c62d102fb44e5f5069aa5c937ebd511a5c3c5c103cf63cf08dcdda25aadc4a1e8bb45da7f26005e03d2f377c8
- SSDEEP 49152:U+Ex+Ex+Ex+El+Ex+Ex+Ex+Ex+Ex+Ev+Ex+Ex+Ex+Ex+Ex+Ex+Ex+El+Ex+Ex+ED:5n7Oz
- TLSH T10A862B0AF94744B1D92B51B00CCFE3BF8A60BB25C4128E76FB4ECB5FB936B215819255
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-09-03_ccfd34a1ec7b97bd73ccb88b2db3342a_coinminer_elex_hijackloader_wannacry.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-03_ccfd34a1ec7b97bd73ccb88b2db3342a_coinminer_elex_hijackloader_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-03_ccfd34a1ec7b97bd73ccb88b2db3342a_coinminer_elex_hijackloader_wannacry
- Size 7.8MB
- SHA256 b59ee0de8cc5b641f65b5497575586d9f34e65a99d285aa0c0ec7b24da12d19c
- MD5 ccfd34a1ec7b97bd73ccb88b2db3342a
- SHA1 057a040ab29448671da7767f915ef30376bf773a
- SHA512 624a2691da90a3f8d9d745bb1ed23a1e42db1a5c62d102fb44e5f5069aa5c937ebd511a5c3c5c103cf63cf08dcdda25aadc4a1e8bb45da7f26005e03d2f377c8
- SSDEEP 49152:U+Ex+Ex+Ex+El+Ex+Ex+Ex+Ex+Ex+Ev+Ex+Ex+Ex+Ex+Ex+Ex+Ex+El+Ex+Ex+ED:5n7Oz
- TLSH T10A862B0AF94744B1D92B51B00CCFE3BF8A60BB25C4128E76FB4ECB5FB936B215819255
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Creates new service(s)
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1Scheduled Task/Job
1Scheduled Task
1System Services
1Service Execution
1Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Scheduled Task/Job
1Scheduled Task
1