General
- Target 2026-09-30_6aa07f5b1bd19acb93f0ba72c4c03ee9_coinminer_elex_upatre_wannacry
- Size 29KB
- Sample261001-p2yvaavepf
- SHA256 9a868269222c0bff6c18465da7aa7154548982e8df10e9c8c8320bcb6fde034b
- MD5 6aa07f5b1bd19acb93f0ba72c4c03ee9
- SHA1 33b1096f1718ec6a61990d350c65a7b6bbbb1ffa
- SHA512 cbcfeb8ce66fdaee9c0e52e55c4e0f88c381b927f6458b7d14a96fa51016789b4888ca481ef0c1cd2cbf4df38c5f87ef304f0ba6c6177ecfb6e29ca435daa4f3
- SSDEEP 384:LLz3qWcd5DUVQQ4oM+JKcMef9YlWRhQIUY/FYHZxgO8vixamynIsfJsT:Xz3qWc7Re1Jen6hpFwxgOTE5jfS
- TLSH T126D2E8DED9864989CC853F3B92FE5B1091189E1D87A45AE7E9A4FC438D7E2C14C31C9C
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-09-30_6aa07f5b1bd19acb93f0ba72c4c03ee9_coinminer_elex_upatre_wannacry.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-30_6aa07f5b1bd19acb93f0ba72c4c03ee9_coinminer_elex_upatre_wannacry
- Size 29KB
- SHA256 9a868269222c0bff6c18465da7aa7154548982e8df10e9c8c8320bcb6fde034b
- MD5 6aa07f5b1bd19acb93f0ba72c4c03ee9
- SHA1 33b1096f1718ec6a61990d350c65a7b6bbbb1ffa
- SHA512 cbcfeb8ce66fdaee9c0e52e55c4e0f88c381b927f6458b7d14a96fa51016789b4888ca481ef0c1cd2cbf4df38c5f87ef304f0ba6c6177ecfb6e29ca435daa4f3
- SSDEEP 384:LLz3qWcd5DUVQQ4oM+JKcMef9YlWRhQIUY/FYHZxgO8vixamynIsfJsT:Xz3qWc7Re1Jen6hpFwxgOTE5jfS
- TLSH T126D2E8DED9864989CC853F3B92FE5B1091189E1D87A45AE7E9A4FC438D7E2C14C31C9C
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE