General
- Target 2026-10-14_4ef00f47f6f427651e736d6832d6470c_coinminer_darpapox_elex_nymaim_rhadamanthys_wannacry
- Size 2.2MB
- Sample261014-1l4ldasycs
- SHA256 73c3ac08585d9f5722095e6be480266a82c183a9b58d7cdeddebd63810be3fb1
- MD5 4ef00f47f6f427651e736d6832d6470c
- SHA1 b1f4adf41ca3e0112b922a3ca368a0c84c3c980d
- SHA512 b39ea3c7332578274148432940dba17a95f23ab16103956d020c61afcd08a0357598a63f0c7f9141e642fa766644f4283cd324a46dd4ace64d731fe42589332e
- SSDEEP 49152:BLnHFLHkJEhtbTChxKCnFnQXBbrtgb/iQvu0UHOaYmLH:HDVt6hxvWbrtUTrUHO2b
- TLSH T110B5F0126790CE32F36FC13243E56E35B6B761213B33CA165E485A716AF1EABD7C1242
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-14_4ef00f47f6f427651e736d6832d6470c_coinminer_darpapox_elex_nymaim_rhadamanthys_wannacry.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-14_4ef00f47f6f427651e736d6832d6470c_coinminer_darpapox_elex_nymaim_rhadamanthys_wannacry.exe
Resource
win11ltsc2024-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-14_4ef00f47f6f427651e736d6832d6470c_coinminer_darpapox_elex_nymaim_rhadamanthys_wannacry
- Size 2.2MB
- SHA256 73c3ac08585d9f5722095e6be480266a82c183a9b58d7cdeddebd63810be3fb1
- MD5 4ef00f47f6f427651e736d6832d6470c
- SHA1 b1f4adf41ca3e0112b922a3ca368a0c84c3c980d
- SHA512 b39ea3c7332578274148432940dba17a95f23ab16103956d020c61afcd08a0357598a63f0c7f9141e642fa766644f4283cd324a46dd4ace64d731fe42589332e
- SSDEEP 49152:BLnHFLHkJEhtbTChxKCnFnQXBbrtgb/iQvu0UHOaYmLH:HDVt6hxvWbrtUTrUHO2b
- TLSH T110B5F0126790CE32F36FC13243E56E35B6B761213B33CA165E485A716AF1EABD7C1242
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Drops file in System32 directory