General
- Target 2026-09-12_0589d20bd862106b62170f6b81479121_cobalt-strike_coinminer_elex_remcos_vidar_wannacry
- Size 866KB
- Sample260913-h1exfsv1ct
- SHA256 fdb4bb1138562a01ba2022c64c696a2dc5d69cfda6b1400ac1f35a56371042f4
- MD5 0589d20bd862106b62170f6b81479121
- SHA1 a1494889e2f4c47db2d1ca60ef6745212b44338c
- SHA512 be1911a2a2506ad1073d7acbb434aba464a4a74d649d7af15cdb6545d8fce9cd8a3be226c90fd5ebc65729e9414c2cab9651e2e95d3ab6830ce61d209245b224
- SSDEEP 12288:q7+DrfVAifJDRTYY0ljo+je8FIqtil84fTJyK9eKQ:q7WDVVmVQqqF6
- TLSH T183154A1A97DC1A95F5B2D670C5A78210EA337C028336C25F27587F196C3B9D86C3AB93
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-12_0589d20bd862106b62170f6b81479121_cobalt-strike_coinminer_elex_remcos_vidar_wannacry.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-12_0589d20bd862106b62170f6b81479121_cobalt-strike_coinminer_elex_remcos_vidar_wannacry
- Size 866KB
- SHA256 fdb4bb1138562a01ba2022c64c696a2dc5d69cfda6b1400ac1f35a56371042f4
- MD5 0589d20bd862106b62170f6b81479121
- SHA1 a1494889e2f4c47db2d1ca60ef6745212b44338c
- SHA512 be1911a2a2506ad1073d7acbb434aba464a4a74d649d7af15cdb6545d8fce9cd8a3be226c90fd5ebc65729e9414c2cab9651e2e95d3ab6830ce61d209245b224
- SSDEEP 12288:q7+DrfVAifJDRTYY0ljo+je8FIqtil84fTJyK9eKQ:q7WDVVmVQqqF6
- TLSH T183154A1A97DC1A95F5B2D670C5A78210EA337C028336C25F27587F196C3B9D86C3AB93
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.