General
- Target 2026-07-05_b2af3722462b8b1c801edab8497820a4_amadey_coinminer_elex_lolbot_smoke-loader_stop_wannacry
- Size 452KB
- Sample260705-vlfxeshz4q
- SHA256 1d60b82e8429184eacbe3c6392ae994f22b9da2a2f5300b394e5dd19ec9bf54f
- MD5 b2af3722462b8b1c801edab8497820a4
- SHA1 325096cb4cfc900b3d443c0a76b5fa50dc616672
- SHA512 89038fdb8232e0493a8467467951011458560f9c8023a83cefdffd04e2fdd0c4be883cd4aa2cefa496e8676901caf6347a67e4d71524f7139df722c988952c5e
- SSDEEP 6144:yH5rA29Vx18IcTgav1cdCTuoPbgwmOLJvKRwLSFXdFkry/h:yHL9Vx6ISvO2x9mONvKRwLSFQry/h
- TLSH T1A7A48E36AAD0C036D473457584A587BABEA5BD323311588FF391F71A1E227E3BA6070D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-05_b2af3722462b8b1c801edab8497820a4_amadey_coinminer_elex_lolbot_smoke-loader_stop_wannacry.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-05_b2af3722462b8b1c801edab8497820a4_amadey_coinminer_elex_lolbot_smoke-loader_stop_wannacry.exe
Resource
win11ltsc2024-20260629-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-05_b2af3722462b8b1c801edab8497820a4_amadey_coinminer_elex_lolbot_smoke-loader_stop_wannacry
- Size 452KB
- SHA256 1d60b82e8429184eacbe3c6392ae994f22b9da2a2f5300b394e5dd19ec9bf54f
- MD5 b2af3722462b8b1c801edab8497820a4
- SHA1 325096cb4cfc900b3d443c0a76b5fa50dc616672
- SHA512 89038fdb8232e0493a8467467951011458560f9c8023a83cefdffd04e2fdd0c4be883cd4aa2cefa496e8676901caf6347a67e4d71524f7139df722c988952c5e
- SSDEEP 6144:yH5rA29Vx18IcTgav1cdCTuoPbgwmOLJvKRwLSFXdFkry/h:yHL9Vx6ISvO2x9mONvKRwLSFQry/h
- TLSH T1A7A48E36AAD0C036D473457584A587BABEA5BD323311588FF391F71A1E227E3BA6070D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE