General
- Target 2026-09-12_1a1a98c467cbcc0895c2b5b0f397ccfc_coinminer_elex_nymaim_rhadamanthys_wannacry
- Size 4.9MB
- Sample260913-ge9dhascld
- SHA256 7812425427d583165ed82e548966196a0de6b51eccbe612f6d27a49ab2bf76db
- MD5 1a1a98c467cbcc0895c2b5b0f397ccfc
- SHA1 4c04a455e3165929af457edd954dd6687596b9a8
- SHA512 656ae3d0d300b63ef45916630e4b82d8bec61affce94fa06cdc343491371d835e333e1b3b863c0e90fea85eb5fe5c33326b256580aa28373d76db29a94a9e905
- SSDEEP 98304:hJRsU8irc/17SAArzrzrF9rmHXWDBKH2rLM7pjSFJspDLOMgd:+iQ+vfJ9rmHm4wIDLw
- TLSH T1B33601AA36888D7DD2FE41FB30D10624ED273C123B36490B59087DA4FA78DBBD61D256
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-12_1a1a98c467cbcc0895c2b5b0f397ccfc_coinminer_elex_nymaim_rhadamanthys_wannacry.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-12_1a1a98c467cbcc0895c2b5b0f397ccfc_coinminer_elex_nymaim_rhadamanthys_wannacry.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-12_1a1a98c467cbcc0895c2b5b0f397ccfc_coinminer_elex_nymaim_rhadamanthys_wannacry
- Size 4.9MB
- SHA256 7812425427d583165ed82e548966196a0de6b51eccbe612f6d27a49ab2bf76db
- MD5 1a1a98c467cbcc0895c2b5b0f397ccfc
- SHA1 4c04a455e3165929af457edd954dd6687596b9a8
- SHA512 656ae3d0d300b63ef45916630e4b82d8bec61affce94fa06cdc343491371d835e333e1b3b863c0e90fea85eb5fe5c33326b256580aa28373d76db29a94a9e905
- SSDEEP 98304:hJRsU8irc/17SAArzrzrF9rmHXWDBKH2rLM7pjSFJspDLOMgd:+iQ+vfJ9rmHm4wIDLw
- TLSH T1B33601AA36888D7DD2FE41FB30D10624ED273C123B36490B59087DA4FA78DBBD61D256
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application