General
- Target 2026-10-02_fe009440b2cb67ed6b61a0a4607c4dd3_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry
- Size 1.7MB
- Sample261002-1ee97stdmf
- SHA256 b45130f02c2914084322bec03cda3eeb6aa788bfc7c02c89a749fcb7c1e7a99e
- MD5 fe009440b2cb67ed6b61a0a4607c4dd3
- SHA1 f8a3b5c7a8fd0f104b444bf184d98132c69c84e5
- SHA512 e98a4143acc46b13c7fdad97ec4e73113b2c85efaffc7438396f3d0ad84b8fc20f49f257a3532548db961ba46877021001fb7fea6ee339c1ab5812c6e17f5a81
- SSDEEP 24576:OXdVtTj2i64T+jdxQCfgOFD3WSwd2QtBBw6xxhVxQtmibjOhZaiRu/4oMaop0UNf:mbTChxKCnFnQXBbrtgb/iQvu0UHO2
- TLSH T10085FF152790CDA1F36FC07283E56E79B5B329213733D886AE4855312BF2E2FE781196
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-02_fe009440b2cb67ed6b61a0a4607c4dd3_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-02_fe009440b2cb67ed6b61a0a4607c4dd3_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry.exe
Resource
win11ltsc2024-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-02_fe009440b2cb67ed6b61a0a4607c4dd3_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry
- Size 1.7MB
- SHA256 b45130f02c2914084322bec03cda3eeb6aa788bfc7c02c89a749fcb7c1e7a99e
- MD5 fe009440b2cb67ed6b61a0a4607c4dd3
- SHA1 f8a3b5c7a8fd0f104b444bf184d98132c69c84e5
- SHA512 e98a4143acc46b13c7fdad97ec4e73113b2c85efaffc7438396f3d0ad84b8fc20f49f257a3532548db961ba46877021001fb7fea6ee339c1ab5812c6e17f5a81
- SSDEEP 24576:OXdVtTj2i64T+jdxQCfgOFD3WSwd2QtBBw6xxhVxQtmibjOhZaiRu/4oMaop0UNf:mbTChxKCnFnQXBbrtgb/iQvu0UHO2
- TLSH T10085FF152790CDA1F36FC07283E56E79B5B329213733D886AE4855312BF2E2FE781196
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Drops file in System32 directory