General
- Target 2026-07-06_63fff0c6ca640c6f5f3d26fbb70eca2b_amadey_coinminer_elex_lolbot_smoke-loader_stop_wannacry
- Size 453KB
- Sample260707-dw5vvsdz4l
- SHA256 3084123862c07881e0a09d6947ad6061f30aec61561a493f5f11706f0b7ea4bb
- MD5 63fff0c6ca640c6f5f3d26fbb70eca2b
- SHA1 bf3480163031bff4a26dad0aab0bcd796e0cf08a
- SHA512 2c35d8cfc16156f04f23bf15b96a261d6c3c44a000700386e059f2d04728fe7d41f18483db026c467eff4a663e7cb4d987e8ac38544eaa93ba23fd855376522a
- SSDEEP 6144:yG5rA29Vx18IcTgav1cdCTuoPbgwmOLJvKRwLSFXdFkry/P:yGL9Vx6ISvO2x9mONvKRwLSFQry/P
- TLSH T169A48E36AAD0C036D473457584A587BABEA5BD323311588FF391F71A1E227E3BA6070D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_63fff0c6ca640c6f5f3d26fbb70eca2b_amadey_coinminer_elex_lolbot_smoke-loader_stop_wannacry.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_63fff0c6ca640c6f5f3d26fbb70eca2b_amadey_coinminer_elex_lolbot_smoke-loader_stop_wannacry.exe
Resource
win11ltsc2024-20260706-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_63fff0c6ca640c6f5f3d26fbb70eca2b_amadey_coinminer_elex_lolbot_smoke-loader_stop_wannacry
- Size 453KB
- SHA256 3084123862c07881e0a09d6947ad6061f30aec61561a493f5f11706f0b7ea4bb
- MD5 63fff0c6ca640c6f5f3d26fbb70eca2b
- SHA1 bf3480163031bff4a26dad0aab0bcd796e0cf08a
- SHA512 2c35d8cfc16156f04f23bf15b96a261d6c3c44a000700386e059f2d04728fe7d41f18483db026c467eff4a663e7cb4d987e8ac38544eaa93ba23fd855376522a
- SSDEEP 6144:yG5rA29Vx18IcTgav1cdCTuoPbgwmOLJvKRwLSFXdFkry/P:yGL9Vx6ISvO2x9mONvKRwLSFQry/P
- TLSH T169A48E36AAD0C036D473457584A587BABEA5BD323311588FF391F71A1E227E3BA6070D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE