General
- Target 2026-10-22_82f974ccf2b139f90a69ee4b41bd4ad2_coinminer_darpapox_elex_jaku_nymaim_rhadamanthys_wannacry
- Size 2.0MB
- Sample261024-hch9zasyev
- SHA256 0f90d87f48ec212d590fe88491fa40414198b6d8fe9acb51cf08865d1e5a377e
- MD5 82f974ccf2b139f90a69ee4b41bd4ad2
- SHA1 381dfdd34fccb4f6eee6ae729d29c98d3483cc4b
- SHA512 5933975b42193ab1fd1650d2d9bb4d521d95f1191cabf4d18f03b7437d9e49e5c0f7cf24621547058e14cd7b5ef1cc34b30f5f432f8b7caf85d68afa565d477b
- SSDEEP 49152:NQDm25bTChxKCnFnQXBbrtgb/iQvu0UHOZm:uDv56hxvWbrtUTrUHOZm
- TLSH T1EEA5F0222751CD60F7AFC13642E41A75B43764A03B73CD8B5E0965391BF1E8BEBE064A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-22_82f974ccf2b139f90a69ee4b41bd4ad2_coinminer_darpapox_elex_jaku_nymaim_rhadamanthys_wannacry.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-22_82f974ccf2b139f90a69ee4b41bd4ad2_coinminer_darpapox_elex_jaku_nymaim_rhadamanthys_wannacry.exe
Resource
win11ltsc2024-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_82f974ccf2b139f90a69ee4b41bd4ad2_coinminer_darpapox_elex_jaku_nymaim_rhadamanthys_wannacry
- Size 2.0MB
- SHA256 0f90d87f48ec212d590fe88491fa40414198b6d8fe9acb51cf08865d1e5a377e
- MD5 82f974ccf2b139f90a69ee4b41bd4ad2
- SHA1 381dfdd34fccb4f6eee6ae729d29c98d3483cc4b
- SHA512 5933975b42193ab1fd1650d2d9bb4d521d95f1191cabf4d18f03b7437d9e49e5c0f7cf24621547058e14cd7b5ef1cc34b30f5f432f8b7caf85d68afa565d477b
- SSDEEP 49152:NQDm25bTChxKCnFnQXBbrtgb/iQvu0UHOZm:uDv56hxvWbrtUTrUHOZm
- TLSH T1EEA5F0222751CD60F7AFC13642E41A75B43764A03B73CD8B5E0965391BF1E8BEBE064A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Drops file in System32 directory