General
- Target 2026-10-23_775ab69f4c0e4fd7e61f72c865bbe90b_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry
- Size 1017KB
- Sample261023-mstsvsa16y
- SHA256 caf99a227a1a2625fc20762055d904a24e51ed8e989dddb4c2b1963c33720dbc
- MD5 775ab69f4c0e4fd7e61f72c865bbe90b
- SHA1 2425e7562668379d27680f72635077d79490276e
- SHA512 4f3e67c5c4394bc35f6e4f9e108583dc659bffd365b1a37352ef939a0f21c6b6a3ea1698421c33c90e60768b1e3a4826f92f1ee024b41cd5228f233e11bc1697
- SSDEEP 24576:pPGRzatThRiVNbLGJv6plFh9iGa2oMYMgdsHGV:w8TjFJspDLoVMgdk
- TLSH T1072502157780CC61F6AFC57265E4AF34BA733A202732C89B5B0895341FF1B8AF762256
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-23_775ab69f4c0e4fd7e61f72c865bbe90b_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-23_775ab69f4c0e4fd7e61f72c865bbe90b_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry.exe
Resource
win11ltsc2024-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-23_775ab69f4c0e4fd7e61f72c865bbe90b_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry
- Size 1017KB
- SHA256 caf99a227a1a2625fc20762055d904a24e51ed8e989dddb4c2b1963c33720dbc
- MD5 775ab69f4c0e4fd7e61f72c865bbe90b
- SHA1 2425e7562668379d27680f72635077d79490276e
- SHA512 4f3e67c5c4394bc35f6e4f9e108583dc659bffd365b1a37352ef939a0f21c6b6a3ea1698421c33c90e60768b1e3a4826f92f1ee024b41cd5228f233e11bc1697
- SSDEEP 24576:pPGRzatThRiVNbLGJv6plFh9iGa2oMYMgdsHGV:w8TjFJspDLoVMgdk
- TLSH T1072502157780CC61F6AFC57265E4AF34BA733A202732C89B5B0895341FF1B8AF762256
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Loads dropped DLL
Adds Run key to start application