General
- Target 2026-09-21_356b7441ba2171ee812ba7e289340be2_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry
- Size 1.7MB
- Sample260922-ravdwsfh87
- SHA256 02adc164d62dd0e759e04e479bb2cbb50f43803976849569bc95058ee648eaa9
- MD5 356b7441ba2171ee812ba7e289340be2
- SHA1 2107b0e770b3de0b862e1a0e7a6a698aa6924a10
- SHA512 91c89390ae492b91eb4e84a8e651ea4ff57556afbeacf85081d81f284420067426e70afd952ee092d84c9b9e05a9cf5af9e7e91044702a0c473f92eec1a1d851
- SSDEEP 24576:OXdVtTj2i64T+jdxQCfgOFD3WSwd2QtBBw6xxhVxQtmibjOhZaiRu/4oMaop0UNX:mbTChxKCnFnQXBbrtgb/iQvu0UHOagu
- TLSH T13B85DE252790CD61F36FC07683E16E79B9B329213733D886AE8855316BF2E1FE381195
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-21_356b7441ba2171ee812ba7e289340be2_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-21_356b7441ba2171ee812ba7e289340be2_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-21_356b7441ba2171ee812ba7e289340be2_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry
- Size 1.7MB
- SHA256 02adc164d62dd0e759e04e479bb2cbb50f43803976849569bc95058ee648eaa9
- MD5 356b7441ba2171ee812ba7e289340be2
- SHA1 2107b0e770b3de0b862e1a0e7a6a698aa6924a10
- SHA512 91c89390ae492b91eb4e84a8e651ea4ff57556afbeacf85081d81f284420067426e70afd952ee092d84c9b9e05a9cf5af9e7e91044702a0c473f92eec1a1d851
- SSDEEP 24576:OXdVtTj2i64T+jdxQCfgOFD3WSwd2QtBBw6xxhVxQtmibjOhZaiRu/4oMaop0UNX:mbTChxKCnFnQXBbrtgb/iQvu0UHOagu
- TLSH T13B85DE252790CD61F36FC07683E16E79B9B329213733D886AE8855316BF2E1FE381195
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Drops file in System32 directory