General
- Target 2026-11-11_154bcee96860d5fb4611eff5d5d8b423_coinminer_elex_wannacry
- Size 3.3MB
- Sample261113-vgvvsady4w
- SHA256 2d391ebf9395bb9a4bacab3870fec0b0b0b932f560912aa368874e4be3f8c958
- MD5 154bcee96860d5fb4611eff5d5d8b423
- SHA1 329e28f5b117a3fc5a6ae7127ab8ee890e023d3f
- SHA512 949af7f08199d5b2928666b4a60ef4842abb2a3ad9b6c3ddef539edc010ef4f85e50ac4db74eb4b42406a06e79febf61be3d5c5c06d94a99a49df000fc0f8345
- SSDEEP 49152:15+hFnQmJ79B6iEHg+w3UiZlad5QdWDlEzn3G2np3Tkom21A0geNacsvNTG8ovIc:15aFnNBdgwRkjlEz3hyL9EajBq97Fz
- TLSH T108F533527BDA90B6E16A32716A0FB34A3ABEFE75070509E7077433062F325D1A7621C7
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-11_154bcee96860d5fb4611eff5d5d8b423_coinminer_elex_wannacry.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-11_154bcee96860d5fb4611eff5d5d8b423_coinminer_elex_wannacry.exe
Resource
win11ltsc2024-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-11_154bcee96860d5fb4611eff5d5d8b423_coinminer_elex_wannacry
- Size 3.3MB
- SHA256 2d391ebf9395bb9a4bacab3870fec0b0b0b932f560912aa368874e4be3f8c958
- MD5 154bcee96860d5fb4611eff5d5d8b423
- SHA1 329e28f5b117a3fc5a6ae7127ab8ee890e023d3f
- SHA512 949af7f08199d5b2928666b4a60ef4842abb2a3ad9b6c3ddef539edc010ef4f85e50ac4db74eb4b42406a06e79febf61be3d5c5c06d94a99a49df000fc0f8345
- SSDEEP 49152:15+hFnQmJ79B6iEHg+w3UiZlad5QdWDlEzn3G2np3Tkom21A0geNacsvNTG8ovIc:15aFnNBdgwRkjlEz3hyL9EajBq97Fz
- TLSH T108F533527BDA90B6E16A32716A0FB34A3ABEFE75070509E7077433062F325D1A7621C7
- MD5 SHA1 SHA512 SSDEEP TLSH
Drops a kernel driver into a user folder
Places a kernel driver outside the normal driver folder, which installers may do while staging drivers; malware can do it before loading its own driver to gain kernel-level control.
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Checks whether UAC is enabled
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.