General
- Target 2026-09-26_a5fe03b54f4b514c9e5d72db2b70fe92_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry
- Size 1.7MB
- Sample260926-vr856ayyft
- SHA256 9d128527e2498f04436b77f3dc5ea02d25624b3742cef9cbbe4a7f75578aa1f3
- MD5 a5fe03b54f4b514c9e5d72db2b70fe92
- SHA1 1631453eebfc963422999058dc5a7f349834d7b1
- SHA512 8715468898657bd3acfe0eded4f1df4bbfe30280f1fd8875dd23bb19799ab85a38d21b68d069966d307ac2521cd3b9d143704ecc67ab9165093f7a1544df6a71
- SSDEEP 24576:OXdVtTj2i64T+jdxQCfgOFD3WSwd2QtBBw6xxhVxQtmibjOhZaiRu/4oMaop0UNt:mbTChxKCnFnQXBbrtgb/iQvu0UHOJ2
- TLSH T1CC85DD252790CCA1F36FC07683E56E79B5B329213B33DC966A4851312BF2E2FE781195
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-26_a5fe03b54f4b514c9e5d72db2b70fe92_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-26_a5fe03b54f4b514c9e5d72db2b70fe92_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry.exe
Resource
win11ltsc2024-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-26_a5fe03b54f4b514c9e5d72db2b70fe92_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry
- Size 1.7MB
- SHA256 9d128527e2498f04436b77f3dc5ea02d25624b3742cef9cbbe4a7f75578aa1f3
- MD5 a5fe03b54f4b514c9e5d72db2b70fe92
- SHA1 1631453eebfc963422999058dc5a7f349834d7b1
- SHA512 8715468898657bd3acfe0eded4f1df4bbfe30280f1fd8875dd23bb19799ab85a38d21b68d069966d307ac2521cd3b9d143704ecc67ab9165093f7a1544df6a71
- SSDEEP 24576:OXdVtTj2i64T+jdxQCfgOFD3WSwd2QtBBw6xxhVxQtmibjOhZaiRu/4oMaop0UNt:mbTChxKCnFnQXBbrtgb/iQvu0UHOJ2
- TLSH T1CC85DD252790CCA1F36FC07683E56E79B5B329213B33DC966A4851312BF2E2FE781195
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Drops file in System32 directory