General
- Target 2026-09-07_f6b6a31f266b5b42d74633ab65732521_coinminer_elex_upatre_wannacry
- Size 29KB
- Sample260908-bc9nlaxvdt
- SHA256 910fa1cd251634c2e3a96f0a63f69266bd80c9e3dcb786999b0d48d25070cc6c
- MD5 f6b6a31f266b5b42d74633ab65732521
- SHA1 28084f3ee09f28a8b5cd369886b1386735ba0215
- SHA512 9275bc294966b8e3ed12c0988855d99efe7e5d79ec068886fb55827069a3d441b3252b3c58980b7901270774cdb8b69c4d2f5cbf8d4ab0e3bc2a178401ee8022
- SSDEEP 384:LLz3qWcd5DUVQQ4oM+JKcMef9YlWRhQIUY/FYHZxgO8vixamynIsf8sTn:Xz3qWc7Re1Jen6hpFwxgOTE5jfR7
- TLSH T184D2F9DED9864949C8853F3B92FE5B0091189E1D87A46AEBE9A4FC438D7F2C14C31C9C
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-09-07_f6b6a31f266b5b42d74633ab65732521_coinminer_elex_upatre_wannacry.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-07_f6b6a31f266b5b42d74633ab65732521_coinminer_elex_upatre_wannacry
- Size 29KB
- SHA256 910fa1cd251634c2e3a96f0a63f69266bd80c9e3dcb786999b0d48d25070cc6c
- MD5 f6b6a31f266b5b42d74633ab65732521
- SHA1 28084f3ee09f28a8b5cd369886b1386735ba0215
- SHA512 9275bc294966b8e3ed12c0988855d99efe7e5d79ec068886fb55827069a3d441b3252b3c58980b7901270774cdb8b69c4d2f5cbf8d4ab0e3bc2a178401ee8022
- SSDEEP 384:LLz3qWcd5DUVQQ4oM+JKcMef9YlWRhQIUY/FYHZxgO8vixamynIsf8sTn:Xz3qWc7Re1Jen6hpFwxgOTE5jfR7
- TLSH T184D2F9DED9864949C8853F3B92FE5B0091189E1D87A46AEBE9A4FC438D7F2C14C31C9C
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE