General
- Target 2026-10-04_e623fc6c2591c6267297d96ae6a36b3b_coinminer_darpapox_elex_jaku_nymaim_rhadamanthys_wannacry
- Size 1.9MB
- Sample261004-3jdchss18q
- SHA256 1cb5741be36a19e8f3f9addaa203bf8bfad8844664481ce6f2c0491afed69f8b
- MD5 e623fc6c2591c6267297d96ae6a36b3b
- SHA1 eda252624dfd7efeb516378e821e0f6096be364b
- SHA512 adeefba9410ec4c5c13d930ab6a0a249d12e8f1061490b0ecfea555b59c05a769578f67b03ee72933b49cf10ddd37b10f0b94105ecb7727a31269fba6a1fe011
- SSDEEP 24576:m8a+ns+omnGTXdVtTj2i64T+jdxQCfgOFD3WSwd2QtBBw6xxhVxQtmibjOhZaiRV:tBEJbTChxKCnFnQXBbrtgb/iQvu0UHO6
- TLSH T1C39501012355CDA0F62FC43243C22E7976F32C613B37DD556A487A322BF1A9EEB86516
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-04_e623fc6c2591c6267297d96ae6a36b3b_coinminer_darpapox_elex_jaku_nymaim_rhadamanthys_wannacry.exe
Resource
win10v2004-20260911-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-04_e623fc6c2591c6267297d96ae6a36b3b_coinminer_darpapox_elex_jaku_nymaim_rhadamanthys_wannacry.exe
Resource
win11ltsc2024-20260911-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-04_e623fc6c2591c6267297d96ae6a36b3b_coinminer_darpapox_elex_jaku_nymaim_rhadamanthys_wannacry
- Size 1.9MB
- SHA256 1cb5741be36a19e8f3f9addaa203bf8bfad8844664481ce6f2c0491afed69f8b
- MD5 e623fc6c2591c6267297d96ae6a36b3b
- SHA1 eda252624dfd7efeb516378e821e0f6096be364b
- SHA512 adeefba9410ec4c5c13d930ab6a0a249d12e8f1061490b0ecfea555b59c05a769578f67b03ee72933b49cf10ddd37b10f0b94105ecb7727a31269fba6a1fe011
- SSDEEP 24576:m8a+ns+omnGTXdVtTj2i64T+jdxQCfgOFD3WSwd2QtBBw6xxhVxQtmibjOhZaiRV:tBEJbTChxKCnFnQXBbrtgb/iQvu0UHO6
- TLSH T1C39501012355CDA0F62FC43243C22E7976F32C613B37DD556A487A322BF1A9EEB86516
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with ASPack
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Drops file in System32 directory