General
- Target 2026-09-05_71c5c7372937dd01e9f9c4447aeb4a7b_coinminer_elex_wannacry
- Size 873KB
- Sample260907-wfpstazzax
- SHA256 0839e93a63c5ec7b1ee587f1f22d23149450f911e1b599466b079c12516e0499
- MD5 71c5c7372937dd01e9f9c4447aeb4a7b
- SHA1 29b62f370451064604f43ed35d083df2c51d0c2d
- SHA512 1d15b66796e5ce23cee5314f097b23befe5225b6c2cb5a0a4173ce2df94abfe19c1926ac81b9c178a1bb48fa535d742db0a55c9d12e3ea61f77e3d4bde66aa74
- SSDEEP 24576:OKWstZWuFLHnQfaImx8/kro98dKC879g3hrXP:rFygbnQiI48/kroSgCEgx
- TLSH T1E9151290F3D1C8FEE96252F1085AEE2121B6BA6E5570550F72957A1D7EB3383203B24B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-05_71c5c7372937dd01e9f9c4447aeb4a7b_coinminer_elex_wannacry.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-05_71c5c7372937dd01e9f9c4447aeb4a7b_coinminer_elex_wannacry
- Size 873KB
- SHA256 0839e93a63c5ec7b1ee587f1f22d23149450f911e1b599466b079c12516e0499
- MD5 71c5c7372937dd01e9f9c4447aeb4a7b
- SHA1 29b62f370451064604f43ed35d083df2c51d0c2d
- SHA512 1d15b66796e5ce23cee5314f097b23befe5225b6c2cb5a0a4173ce2df94abfe19c1926ac81b9c178a1bb48fa535d742db0a55c9d12e3ea61f77e3d4bde66aa74
- SSDEEP 24576:OKWstZWuFLHnQfaImx8/kro98dKC879g3hrXP:rFygbnQiI48/kroSgCEgx
- TLSH T1E9151290F3D1C8FEE96252F1085AEE2121B6BA6E5570550F72957A1D7EB3383203B24B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables packed with ConfuserEx Mod
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
ConfuserEx .NET packer
Detects ConfuserEx .NET packer.