General
- Target 2026-07-27_f916b5f220eb8ea7246c734dba047f88_amadey_coinminer_elex_lolbot_smoke-loader_stop_wannacry
- Size 453KB
- Sample260727-gra2gawenh
- SHA256 209e40e4ab6dc3e24a6797afe78d12dff2ab81129d1bc54cd6b08b006d797973
- MD5 f916b5f220eb8ea7246c734dba047f88
- SHA1 b3162616b250cc317cbf49c99eeff857d734ee38
- SHA512 811dfaea36a42f45bdff0a81874653b545908aa1a070b9ab955b197b262637c433e570c099a8ef0f70aa3a8381d941c262788a490f7a38f5524599c1913dace9
- SSDEEP 6144:yR5rA29Vx18IcTgav1cdCTuoPbgwmOLJvKRwLSFXdFkry/C:yRL9Vx6ISvO2x9mONvKRwLSFQry/C
- TLSH T178A48E36AAD0C036D473457584A587BABEA5BD323311588FF391F71A1E227E3BA6070D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-27_f916b5f220eb8ea7246c734dba047f88_amadey_coinminer_elex_lolbot_smoke-loader_stop_wannacry.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-27_f916b5f220eb8ea7246c734dba047f88_amadey_coinminer_elex_lolbot_smoke-loader_stop_wannacry.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-27_f916b5f220eb8ea7246c734dba047f88_amadey_coinminer_elex_lolbot_smoke-loader_stop_wannacry
- Size 453KB
- SHA256 209e40e4ab6dc3e24a6797afe78d12dff2ab81129d1bc54cd6b08b006d797973
- MD5 f916b5f220eb8ea7246c734dba047f88
- SHA1 b3162616b250cc317cbf49c99eeff857d734ee38
- SHA512 811dfaea36a42f45bdff0a81874653b545908aa1a070b9ab955b197b262637c433e570c099a8ef0f70aa3a8381d941c262788a490f7a38f5524599c1913dace9
- SSDEEP 6144:yR5rA29Vx18IcTgav1cdCTuoPbgwmOLJvKRwLSFXdFkry/C:yRL9Vx6ISvO2x9mONvKRwLSFQry/C
- TLSH T178A48E36AAD0C036D473457584A587BABEA5BD323311588FF391F71A1E227E3BA6070D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE