General
- Target 2026-07-11_724947cf36b9bfe94c82653f6404a53c_amadey_coinminer_elex_lolbot_smoke-loader_stop_wannacry
- Size 453KB
- Sample260711-gpftyacw5m
- SHA256 36473937c4d3782b8678975fd51fdbabc54eb24fabb5e4ea25b06e59d10c09df
- MD5 724947cf36b9bfe94c82653f6404a53c
- SHA1 e5abc0d48c0e02f2530c48a877e314e12fe77219
- SHA512 2e5f64f2d10e6b8b74312c0b19683a8142529b707fdd8830ec995b70c3050734ff9a9c9df8092ebb3849d939f6ecaeb9d2f4bc4e188722a447d7fe9a901e32d6
- SSDEEP 6144:yG5rA29Vx18IcTgav1cdCTuoPbgwmOLJvKRwLSFXdFkry/j:yGL9Vx6ISvO2x9mONvKRwLSFQry/j
- TLSH T1A4A48E36AAD0C036D473457584A587BABEA5BD323311588FF391F71A1E227E3BA6070D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-11_724947cf36b9bfe94c82653f6404a53c_amadey_coinminer_elex_lolbot_smoke-loader_stop_wannacry.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-11_724947cf36b9bfe94c82653f6404a53c_amadey_coinminer_elex_lolbot_smoke-loader_stop_wannacry.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-11_724947cf36b9bfe94c82653f6404a53c_amadey_coinminer_elex_lolbot_smoke-loader_stop_wannacry
- Size 453KB
- SHA256 36473937c4d3782b8678975fd51fdbabc54eb24fabb5e4ea25b06e59d10c09df
- MD5 724947cf36b9bfe94c82653f6404a53c
- SHA1 e5abc0d48c0e02f2530c48a877e314e12fe77219
- SHA512 2e5f64f2d10e6b8b74312c0b19683a8142529b707fdd8830ec995b70c3050734ff9a9c9df8092ebb3849d939f6ecaeb9d2f4bc4e188722a447d7fe9a901e32d6
- SSDEEP 6144:yG5rA29Vx18IcTgav1cdCTuoPbgwmOLJvKRwLSFXdFkry/j:yGL9Vx6ISvO2x9mONvKRwLSFQry/j
- TLSH T1A4A48E36AAD0C036D473457584A587BABEA5BD323311588FF391F71A1E227E3BA6070D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE