General
- Target 2026-10-22_dbca56d65ba0af09479bb95b75a7ce77_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry
- Size 1.7MB
- Sample261023-vwpbjsfs8n
- SHA256 71b01baff7b1208461e8f92d5b10a34ce4b02d5b6da02332d1d86fde92655c95
- MD5 dbca56d65ba0af09479bb95b75a7ce77
- SHA1 29c6883618305e81626c8c63aebb340b0a0a2143
- SHA512 1789fbc9430f2b84e32b2b56b8ff72c451acaccd8471db9aa8dc7efa95a0d5d503f8548070fc0ccb867970057f9189347087998f1ec51a5e03b09d15be082629
- SSDEEP 24576:OXdVtTj2i64T+jdxQCfgOFD3WSwd2QtBBw6xxhVxQtmibjOhZaiRu/4oMaop0UNy:mbTChxKCnFnQXBbrtgb/iQvu0UHOP
- TLSH T1438500152790CDA1F36FC07283E56E79B6B329213733D8966E4855312BF2E2FE781096
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-22_dbca56d65ba0af09479bb95b75a7ce77_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-22_dbca56d65ba0af09479bb95b75a7ce77_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry.exe
Resource
win11ltsc2024-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_dbca56d65ba0af09479bb95b75a7ce77_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry
- Size 1.7MB
- SHA256 71b01baff7b1208461e8f92d5b10a34ce4b02d5b6da02332d1d86fde92655c95
- MD5 dbca56d65ba0af09479bb95b75a7ce77
- SHA1 29c6883618305e81626c8c63aebb340b0a0a2143
- SHA512 1789fbc9430f2b84e32b2b56b8ff72c451acaccd8471db9aa8dc7efa95a0d5d503f8548070fc0ccb867970057f9189347087998f1ec51a5e03b09d15be082629
- SSDEEP 24576:OXdVtTj2i64T+jdxQCfgOFD3WSwd2QtBBw6xxhVxQtmibjOhZaiRu/4oMaop0UNy:mbTChxKCnFnQXBbrtgb/iQvu0UHOP
- TLSH T1438500152790CDA1F36FC07283E56E79B6B329213733D8966E4855312BF2E2FE781096
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Drops file in System32 directory