General
- Target 2026-09-23_451a2ba15d91b68ffc841d76f64eed87_coinminer_darpapox_elex_jaku_nymaim_rhadamanthys_wannacry
- Size 2.0MB
- Sample260924-ltke5sys9p
- SHA256 30c42dae7c36cb1e43a620f5b805d173b5f4f80742fdafcf28e9f189c61fc7c5
- MD5 451a2ba15d91b68ffc841d76f64eed87
- SHA1 13865dbc84bda9186c57c16825a15631ccae3a07
- SHA512 7bc619572d33f2bfdaf9086bf57c90eb1a97d6aae25dc57937fb1f838271addd49646be7c4e1210b6167dde184be75b501d1adae697f1b988b5a97664a64f8cf
- SSDEEP 49152:JcrEiLrSlbTChxKCnFnQXBbrtgb/iQvu0UHOV:2rEGrSl6hxvWbrtUTrUHOV
- TLSH T119A5DE102390CC22F35FC07247E59EBA797769213733D8866F845A392BF0D9BE7A1256
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-23_451a2ba15d91b68ffc841d76f64eed87_coinminer_darpapox_elex_jaku_nymaim_rhadamanthys_wannacry.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-23_451a2ba15d91b68ffc841d76f64eed87_coinminer_darpapox_elex_jaku_nymaim_rhadamanthys_wannacry.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-23_451a2ba15d91b68ffc841d76f64eed87_coinminer_darpapox_elex_jaku_nymaim_rhadamanthys_wannacry
- Size 2.0MB
- SHA256 30c42dae7c36cb1e43a620f5b805d173b5f4f80742fdafcf28e9f189c61fc7c5
- MD5 451a2ba15d91b68ffc841d76f64eed87
- SHA1 13865dbc84bda9186c57c16825a15631ccae3a07
- SHA512 7bc619572d33f2bfdaf9086bf57c90eb1a97d6aae25dc57937fb1f838271addd49646be7c4e1210b6167dde184be75b501d1adae697f1b988b5a97664a64f8cf
- SSDEEP 49152:JcrEiLrSlbTChxKCnFnQXBbrtgb/iQvu0UHOV:2rEGrSl6hxvWbrtUTrUHOV
- TLSH T119A5DE102390CC22F35FC07247E59EBA797769213733D8866F845A392BF0D9BE7A1256
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Drops file in System32 directory