General
- Target 2026-11-10_fa90f7a6e4ef3e785e108476a7c56bbd_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry
- Size 1.2MB
- Sample261110-e3d66atw4l
- SHA256 584f53222a52da14ee0e6ba62761021c31ef2bb09df24b87fb9f53991c8b5505
Score
10/10
Malware Config
Targets
-
- Target 2026-11-10_fa90f7a6e4ef3e785e108476a7c56bbd_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry
- Size 1.2MB
- SHA256 584f53222a52da14ee0e6ba62761021c31ef2bb09df24b87fb9f53991c8b5505
Score10/10Modifies firewall policy service
Drops file in Drivers directory
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Loads dropped DLL
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
Drops file in System32 directory
UPX packed file
Detects executables packed with UPX/modified UPX open source packer.
MITRE ATT&CK Enterprise v16
Privilege Escalation
Create or Modify System Process
1Windows Service
1Process Injection
1Defense Evasion
Impair Defenses
1Disable or Modify System Firewall
1Modify Registry
1Process Injection
1