General
- Target 2026-09-22_f84901e273b9e8084c44bf9ba3e7f476_coinminer_elex_hijackloader_mimic_pay2key_wannacry
- Size 218KB
- Sample260922-tp31paydkf
- SHA256 05e678377ad87d1ac3fb89550cd19cca2d61d4968d13a227cf47995e36950175
- MD5 f84901e273b9e8084c44bf9ba3e7f476
- SHA1 c8a7cc484833836ebbbf45d342df781b819db89f
- SHA512 ea602ffc3be74a3522a2ba6d222bfa3338aa214084bb16bffc621cc4497e943a7d29bf0d76876659d6770417ef7234aad59d06828db92d4f9e0858167dfefcf6
- SSDEEP 6144:dLTHQOrRezFWuRwICnJtt3dJpMER8LfDB83H:dXwOrReFWQ6DdU17Dq
- TLSH T16624E1027BC1C8F8E1A21571498577A66DB9F7340B258AC3A7C40E0A5BB13D5EB3E3D6
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-22_f84901e273b9e8084c44bf9ba3e7f476_coinminer_elex_hijackloader_mimic_pay2key_wannacry.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-22_f84901e273b9e8084c44bf9ba3e7f476_coinminer_elex_hijackloader_mimic_pay2key_wannacry
- Size 218KB
- SHA256 05e678377ad87d1ac3fb89550cd19cca2d61d4968d13a227cf47995e36950175
- MD5 f84901e273b9e8084c44bf9ba3e7f476
- SHA1 c8a7cc484833836ebbbf45d342df781b819db89f
- SHA512 ea602ffc3be74a3522a2ba6d222bfa3338aa214084bb16bffc621cc4497e943a7d29bf0d76876659d6770417ef7234aad59d06828db92d4f9e0858167dfefcf6
- SSDEEP 6144:dLTHQOrRezFWuRwICnJtt3dJpMER8LfDB83H:dXwOrReFWQ6DdU17Dq
- TLSH T16624E1027BC1C8F8E1A21571498577A66DB9F7340B258AC3A7C40E0A5BB13D5EB3E3D6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.