General

  • Target
    2026-11-11_154bcee96860d5fb4611eff5d5d8b423_coinminer_elex_wannacry
  • Size 3.3MB
  • Sample261113-vgvvsady4w
  • SHA256 2d391ebf9395bb9a4bacab3870fec0b0b0b932f560912aa368874e4be3f8c958
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-11-11_154bcee96860d5fb4611eff5d5d8b423_coinminer_elex_wannacry
    • Size 3.3MB
    • SHA256 2d391ebf9395bb9a4bacab3870fec0b0b0b932f560912aa368874e4be3f8c958
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Drops a kernel driver into a user folder

      Places a kernel driver outside the normal driver folder, which installers may do while staging drivers; malware can do it before loading its own driver to gain kernel-level control.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Checks whether UAC is enabled

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v16

Tasks