General
- Target 2026-10-28_9d4ed0ad26dd6760e3f9b0436b254a7f_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry
- Size 984KB
- Sample261029-2kca6sft8t
- SHA256 01752552232f5b33bfd7bccd6b2f2824eedd5bef59cbc1e9352c39058eeae18c
- MD5 9d4ed0ad26dd6760e3f9b0436b254a7f
- SHA1 ae9a3f1f3e18b5dbdce794f429ad95a2b47940b2
- SHA512 fa8c59054c917f409804c5c64cda882602147c17904f74f9bfbc75aa41af181046f71e3e087b9efbf5735b3d35e803b09e49471dc1b25310491d5ba21572f093
- SSDEEP 24576:1GRzatThRiVNbLGJv6plFh9iGa2oMYMgdsHGeC:o8TjFJspDLoVMgdkLC
- TLSH T12A25E0196B80CDA1F35FC07296D06E34B6732A203733CD4A6E4896391BF2E5FE792156
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-28_9d4ed0ad26dd6760e3f9b0436b254a7f_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-28_9d4ed0ad26dd6760e3f9b0436b254a7f_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry.exe
Resource
win11ltsc2024-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-28_9d4ed0ad26dd6760e3f9b0436b254a7f_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry
- Size 984KB
- SHA256 01752552232f5b33bfd7bccd6b2f2824eedd5bef59cbc1e9352c39058eeae18c
- MD5 9d4ed0ad26dd6760e3f9b0436b254a7f
- SHA1 ae9a3f1f3e18b5dbdce794f429ad95a2b47940b2
- SHA512 fa8c59054c917f409804c5c64cda882602147c17904f74f9bfbc75aa41af181046f71e3e087b9efbf5735b3d35e803b09e49471dc1b25310491d5ba21572f093
- SSDEEP 24576:1GRzatThRiVNbLGJv6plFh9iGa2oMYMgdsHGeC:o8TjFJspDLoVMgdkLC
- TLSH T12A25E0196B80CDA1F35FC07296D06E34B6732A203733CD4A6E4896391BF2E5FE792156
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application