2026-09-19_57e4f0231f951bda0c8c3a016157ec7d_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry

General

Target
2026-09-19_57e4f0231f951bda0c8c3a016157ec7d_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry
Size 240KB
Sample260919-fmlfzabe62
SHA256 30b6a0ed18e0d488b7f1e0fa4384dc52981c14772c41930f5034112f876c2f4c
MD5 57e4f0231f951bda0c8c3a016157ec7d
SHA1 682844da1a7c73c0fee2b0d06844e8187007ef29
SHA512 b6f076c4cbffe7dc9286f511c9bc9e0796e42e6f49130fd966e15f33552dabb048adf35c06b1aa2d0ad00234589f0ff05bf5367001d9fbcfcc91f685e286ce9f
SSDEEP 6144:V7GqcWxc5tTBsJWKFGUOfCPJ4NzNsuewQ:tBpxc5tTG7FE6PJ45NcwQ
TLSH
T11034DF193A9049B2C0AFD0B7C0D5BB38F77B33321766D94B679C86700E62766FA112D6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-19_57e4f0231f951bda0c8c3a016157ec7d_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry

File Explorer

2026-09-19_57e4f0231f951bda0c8c3a016157ec7d_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry

.exe 240KB

2026-09-19_57e4f0231f951bda0c8c3a016157ec7d_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry

IMPHASH 8ee1d6ac14557b768dcccdd9bb83afc0
SHA256 30b6a0ed18e0d488b7f1e0fa4384dc52981c14772c41930f5034112f876c2f4c
MD5 57e4f0231f951bda0c8c3a016157ec7d
SHA1 682844da1a7c73c0fee2b0d06844e8187007ef29
SHA512 b6f076c4cbffe7dc9286f511c9bc9e0796e42e6f49130fd966e15f33552dabb048adf35c06b1aa2d0ad00234589f0ff05bf5367001d9fbcfcc91f685e286ce9f
SSDEEP 6144:V7GqcWxc5tTBsJWKFGUOfCPJ4NzNsuewQ:tBpxc5tTG7FE6PJ45NcwQ
TLSH
T11034DF193A9049B2C0AFD0B7C0D5BB38F77B33321766D94B679C86700E62766FA112D6
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

38378

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetProcAddress GetModuleHandleW GetEnvironmentVariableW GetLastError CreateDirectoryW FindClose FindFirstFileW CloseHandle CreateFileW FreeLibrary OpenProcess WideCharToMultiByte TerminateProcess GetCommandLineW GetModuleFileNameW CreateProcessW lstrlenW GetTempPathW GetModuleHandleA GetOEMCP GetACP SetEndOfFile FlushFileBuffers SetStdHandle GetStringTypeW HeapAlloc GetProcessHeap VirtualAlloc VirtualProtect VirtualFree LoadLibraryA IsBadReadPtr HeapFree DeleteFileW GetTempFileNameW CopyFileW RtlUnwind InterlockedDecrement InterlockedIncrement RaiseException GetStartupInfoW GetVersion ExitProcess HeapReAlloc GetCurrentThreadId TlsSetValue TlsAlloc SetLastError TlsGetValue InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetCurrentProcess HeapSize HeapDestroy HeapCreate IsBadWritePtr SetUnhandledExceptionFilter UnhandledExceptionFilter FreeEnvironmentStringsA MultiByteToWideChar FreeEnvironmentStringsW GetEnvironmentStringsW GetEnvironmentStrings GetCommandLineA SetHandleCount GetStdHandle GetFileType GetStartupInfoA WriteFile GetModuleFileNameA SetFilePointer ReadFile IsBadCodePtr LCMapStringA LCMapStringW GetCPInfo GetStringTypeA

shell32

CommandLineToArgvW

psapi

GetModuleFileNameExW

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-19_57e4f0231f951bda0c8c3a016157ec7d_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry

kernel32

shell32

psapi

generic