General
- Target 2026-10-14_3e3831dcfa1135e76c2b79453baf7e01_coinminer_darkgate_darpapox_elex_nymaim_rhadamanthys_wannacry
- Size 3.5MB
- Sample261014-22e4dstxat
- SHA256 752f517dcecf7dffea86538f1a5329ce4fc93dcd3dcaf5e47ab061e2aa2d1232
- MD5 3e3831dcfa1135e76c2b79453baf7e01
- SHA1 a15bc9cbe766063c14775a9eb6633f2b521729a0
- SHA512 b572dde86143ce329f2eefe472edc4220d0e10cbf8a3af18f2cb96245ed146c4f01a671415f0c1b342ec6b7f6181abd0286dc502f699d1348aa3475d68ea6b1f
- SSDEEP 98304:gXSM6PUl/g3n71lJYAgj37qkBhhyFAjRvhUzFBh6hxvWbrtUTrUHO2x:gXSM63nqjmEdjRvhUzFBEx+NcIOO
- TLSH T134F5E1203B40C476D63F707182CAA7B9B3BBA5315FB556575B901E382BB0893D72862F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-14_3e3831dcfa1135e76c2b79453baf7e01_coinminer_darkgate_darpapox_elex_nymaim_rhadamanthys_wannacry.exe
Resource
win10v2004-20260911-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-14_3e3831dcfa1135e76c2b79453baf7e01_coinminer_darkgate_darpapox_elex_nymaim_rhadamanthys_wannacry.exe
Resource
win11ltsc2024-20260911-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-14_3e3831dcfa1135e76c2b79453baf7e01_coinminer_darkgate_darpapox_elex_nymaim_rhadamanthys_wannacry
- Size 3.5MB
- SHA256 752f517dcecf7dffea86538f1a5329ce4fc93dcd3dcaf5e47ab061e2aa2d1232
- MD5 3e3831dcfa1135e76c2b79453baf7e01
- SHA1 a15bc9cbe766063c14775a9eb6633f2b521729a0
- SHA512 b572dde86143ce329f2eefe472edc4220d0e10cbf8a3af18f2cb96245ed146c4f01a671415f0c1b342ec6b7f6181abd0286dc502f699d1348aa3475d68ea6b1f
- SSDEEP 98304:gXSM6PUl/g3n71lJYAgj37qkBhhyFAjRvhUzFBh6hxvWbrtUTrUHO2x:gXSM63nqjmEdjRvhUzFBEx+NcIOO
- TLSH T134F5E1203B40C476D63F707182CAA7B9B3BBA5315FB556575B901E382BB0893D72862F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Drops file in System32 directory