2026-10-28_9d4ed0ad26dd6760e3f9b0436b254a7f_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-28_9d4ed0ad26dd6760e3f9b0436b254a7f_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry
Size 984KB
Sample261029-2kca6sft8t
SHA256 01752552232f5b33bfd7bccd6b2f2824eedd5bef59cbc1e9352c39058eeae18c
MD5 9d4ed0ad26dd6760e3f9b0436b254a7f
SHA1 ae9a3f1f3e18b5dbdce794f429ad95a2b47940b2
SHA512 fa8c59054c917f409804c5c64cda882602147c17904f74f9bfbc75aa41af181046f71e3e087b9efbf5735b3d35e803b09e49471dc1b25310491d5ba21572f093
SSDEEP 24576:1GRzatThRiVNbLGJv6plFh9iGa2oMYMgdsHGeC:o8TjFJspDLoVMgdkLC
TLSH
T12A25E0196B80CDA1F35FC07296D06E34B6732A203733CD4A6E4896391BF2E5FE792156
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-28_9d4ed0ad26dd6760e3f9b0436b254a7f_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry

File Explorer

2026-10-28_9d4ed0ad26dd6760e3f9b0436b254a7f_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry

.exe 984KB

2026-10-28_9d4ed0ad26dd6760e3f9b0436b254a7f_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry

IMPHASH c3b2a72fc7c74ee7a03dddd0c5aae98b
SHA256 01752552232f5b33bfd7bccd6b2f2824eedd5bef59cbc1e9352c39058eeae18c
MD5 9d4ed0ad26dd6760e3f9b0436b254a7f
SHA1 ae9a3f1f3e18b5dbdce794f429ad95a2b47940b2
SHA512 fa8c59054c917f409804c5c64cda882602147c17904f74f9bfbc75aa41af181046f71e3e087b9efbf5735b3d35e803b09e49471dc1b25310491d5ba21572f093
SSDEEP 24576:1GRzatThRiVNbLGJv6plFh9iGa2oMYMgdsHGeC:o8TjFJspDLoVMgdkLC
TLSH
T12A25E0196B80CDA1F35FC07296D06E34B6732A203733CD4A6E4896391BF2E5FE792156
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

56992

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

GetUserNameW

iphlpapi

GetAdaptersInfo

user32

wsprintfW GetSystemMetrics

ws2_32

inet_addr

kernel32

SetEnvironmentVariableA GetOEMCP GetACP CompareStringW CompareStringA SetEndOfFile GetStringTypeW GetStringTypeA FlushFileBuffers GetProcAddress GetModuleHandleW GetEnvironmentVariableW GetLastError CreateDirectoryW FindClose FindFirstFileW CloseHandle CreateFileW FreeLibrary GetDriveTypeW MultiByteToWideChar TerminateThread GetCurrentThread GetExitCodeThread WaitForSingleObject CreateThread WideCharToMultiByte GetTempFileNameW GetTempPathW LoadLibraryA GetSystemDefaultLangID GetComputerNameW SetFileAttributesW CopyFileW Sleep GetCurrentProcessId GetModuleFileNameW CreateProcessW lstrlenW GetSystemInfo GetVersionExW HeapAlloc GetProcessHeap VirtualAlloc VirtualProtect VirtualFree IsBadReadPtr HeapFree DeleteFileW GetSystemTime RtlUnwind GetTimeZoneInformation InterlockedDecrement InterlockedIncrement RaiseException GetModuleHandleA GetStartupInfoW GetVersion ExitProcess HeapReAlloc GetCurrentThreadId TlsSetValue TlsAlloc SetLastError TlsGetValue InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess HeapSize HeapDestroy HeapCreate IsBadWritePtr WriteFile SetUnhandledExceptionFilter UnhandledExceptionFilter FreeEnvironmentStringsA FreeEnvironmentStringsW GetEnvironmentStringsW GetEnvironmentStrings GetCommandLineW GetCommandLineA SetHandleCount GetStdHandle GetFileType GetStartupInfoA GetModuleFileNameA SetFilePointer ReadFile IsBadCodePtr LCMapStringA LCMapStringW GetCPInfo SetStdHandle

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-28_9d4ed0ad26dd6760e3f9b0436b254a7f_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry

advapi32

iphlpapi

user32

ws2_32

kernel32

generic