2026-10-23_ec292bad8c7eb566555697d0581ad808_coinminer_elex_glassworm_jaku_nymaim_rhadamanthys_stop_wannacry

General

Target
2026-10-23_ec292bad8c7eb566555697d0581ad808_coinminer_elex_glassworm_jaku_nymaim_rhadamanthys_stop_wannacry
Size 1.9MB
Sample261023-gsfncacc77
SHA256 6498c689dc3ffcf9d729c78b8ac2ceca498c7231176bb1182aeab1f1e33d8983
MD5 ec292bad8c7eb566555697d0581ad808
SHA1 921dbeb0ce771de6b6a4f7bff109cd7bc88bb8bc
SHA512 44056bba24a9db3d6865c1e7f89f0c6fd8964b0a35b69d5ef4ae18a0a381b582483e9701dbe4674d71ec2af47cd5b73496e20b262b47e0c49bfcb7473729dc4c
SSDEEP 49152:Oqb00pr/FjovFGl+Jq8TjFJspDLoVMgdkt:OU00xlowowSFJspDLOMgdo
TLSH
T1A695E1B6BB81C8B2E556417151E3C3359E336E36433B89CB9BD419358E212E1AB3D7C8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-23_ec292bad8c7eb566555697d0581ad808_coinminer_elex_glassworm_jaku_nymaim_rhadamanthys_stop_wannacry

2026-10-23_ec292bad8c7eb566555697d0581ad808_coinminer_elex_glassworm_jaku_nymaim_rhadamanthys_stop_wannacry

.exe 1.9MB

IMPHASH 730073214094cd328547bf1f72289752
SHA256 6498c689dc3ffcf9d729c78b8ac2ceca498c7231176bb1182aeab1f1e33d8983
MD5 ec292bad8c7eb566555697d0581ad808
SHA1 921dbeb0ce771de6b6a4f7bff109cd7bc88bb8bc
SHA512 44056bba24a9db3d6865c1e7f89f0c6fd8964b0a35b69d5ef4ae18a0a381b582483e9701dbe4674d71ec2af47cd5b73496e20b262b47e0c49bfcb7473729dc4c
SSDEEP 49152:Oqb00pr/FjovFGl+Jq8TjFJspDLoVMgdkt:OU00xlowowSFJspDLOMgdo
TLSH
T1A695E1B6BB81C8B2E556417151E3C3359E336E36433B89CB9BD419358E212E1AB3D7C8
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

5791

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths