2026-10-17_fe38b15d02de841fee896aa8deae16a4_coinminer_elex_redline-stealer_stop_wannacry

General

Target
2026-10-17_fe38b15d02de841fee896aa8deae16a4_coinminer_elex_redline-stealer_stop_wannacry
Size 8.8MB
Sample261017-3yk1xae19s
SHA256 d8b8901a565533b5bf1a69bb01b371d2d38203eb407c59e3d5adb52f421a40d4
MD5 fe38b15d02de841fee896aa8deae16a4
SHA1 6b0fce157e57dfee67cc54c1c52084bac356f622
SHA512 babe72126d252b4c167235c22315ae85bd7dfe3f7f35b735df98e051fa6a12f6dd78b4eb6ce8058c030fc4ab857aba9e7d58b758c1ab4e9bce83f6c6c2ad768a
SSDEEP 24576:VL8bCtm53/gbBFdX/cUczf/gbBFdXhNjz2/gbBFdX9:Lm53/WBFNcVf/WBFR2/WBFj
TLSH
T1D596B0C2B784C072E49201380A6783510FAABC955B33BA87F7507A5EAE33EC55DB6753
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-17_fe38b15d02de841fee896aa8deae16a4_coinminer_elex_redline-stealer_stop_wannacry

2026-10-17_fe38b15d02de841fee896aa8deae16a4_coinminer_elex_redline-stealer_stop_wannacry

.exe 8.8MB

IMPHASH 2c53af98c3798b761655e1cc45b9e3af
SHA256 d8b8901a565533b5bf1a69bb01b371d2d38203eb407c59e3d5adb52f421a40d4
MD5 fe38b15d02de841fee896aa8deae16a4
SHA1 6b0fce157e57dfee67cc54c1c52084bac356f622
SHA512 babe72126d252b4c167235c22315ae85bd7dfe3f7f35b735df98e051fa6a12f6dd78b4eb6ce8058c030fc4ab857aba9e7d58b758c1ab4e9bce83f6c6c2ad768a
SSDEEP 24576:VL8bCtm53/gbBFdX/cUczf/gbBFdXhNjz2/gbBFdX9:Lm53/WBFNcVf/WBFR2/WBFj
TLSH
T1D596B0C2B784C072E49201380A6783510FAABC955B33BA87F7507A5EAE33EC55DB6753
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

4996

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths