General
- Target 2026-10-04_ea5619554931e58810d1fe29f619cd10_coinminer_elex_wannacry
- Size 2.0MB
- Sample261004-213s3asy4j
- SHA256 8613ee594c165077000a0ed83028ba3770f665de913739e4d48072fe4be647d8
- MD5 ea5619554931e58810d1fe29f619cd10
- SHA1 48130a9e2f27100cf8a40d4478f33c82772db981
- SHA512 c23c6e2cfca8a5085b79393d2d99eae7ef0b8d003d080b1b2bad3d7f100c2ac5e36e0a4e99fc7f65dc6108e0630978a4af588df81200985a7303d8c81f8bd7eb
- SSDEEP 49152:kfp/dnUQ5ZAoVufaAGa2jFtv5kRC7TgWQVREjwd:kfp6Q5ZAoVufgeR862m
- TLSH T1C4A533647CE795BEC0E14332C988957926FFCEA19817C00B7F9476867E35C21832D9AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-04_ea5619554931e58810d1fe29f619cd10_coinminer_elex_wannacry.exe
Resource
win10v2004-20260911-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-04_ea5619554931e58810d1fe29f619cd10_coinminer_elex_wannacry.exe
Resource
win11ltsc2024-20260911-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-04_ea5619554931e58810d1fe29f619cd10_coinminer_elex_wannacry
- Size 2.0MB
- SHA256 8613ee594c165077000a0ed83028ba3770f665de913739e4d48072fe4be647d8
- MD5 ea5619554931e58810d1fe29f619cd10
- SHA1 48130a9e2f27100cf8a40d4478f33c82772db981
- SHA512 c23c6e2cfca8a5085b79393d2d99eae7ef0b8d003d080b1b2bad3d7f100c2ac5e36e0a4e99fc7f65dc6108e0630978a4af588df81200985a7303d8c81f8bd7eb
- SSDEEP 49152:kfp/dnUQ5ZAoVufaAGa2jFtv5kRC7TgWQVREjwd:kfp6Q5ZAoVufgeR862m
- TLSH T1C4A533647CE795BEC0E14332C988957926FFCEA19817C00B7F9476867E35C21832D9AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Suspicious use of SetThreadContext