General
- Target 2026-08-01_3c8f70c48fdd3f6d4107414cd3f59c03_amadey_coinminer_elex_lolbot_smoke-loader_stop_wannacry
- Size 453KB
- Sample260801-m6yc7syscv
- SHA256 d6d336036855c607eea6f5cc90f82b55651e2be1075b7731e8ac6310f2aa2064
- MD5 3c8f70c48fdd3f6d4107414cd3f59c03
- SHA1 c66278b1f5fe236f78419ccee400e780f5f5340e
- SHA512 0d0a0bdef63757520d13957adfe51a16a5e38b5a8e369e660fff683321ec923a297c3e68682d1d89107f32af910469fdbabca48ae4f216341a3fd354208df089
- SSDEEP 6144:y15rA29Vx18IcTgav1cdCTuoPbgwmOLJvKRwLSFXdFkry/sn:y1L9Vx6ISvO2x9mONvKRwLSFQry/sn
- TLSH T1EAA48E36AAD0C036D473457584A587BABAA5BD323311588FF391F71A1E227E3BA6070D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-01_3c8f70c48fdd3f6d4107414cd3f59c03_amadey_coinminer_elex_lolbot_smoke-loader_stop_wannacry.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_3c8f70c48fdd3f6d4107414cd3f59c03_amadey_coinminer_elex_lolbot_smoke-loader_stop_wannacry.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_3c8f70c48fdd3f6d4107414cd3f59c03_amadey_coinminer_elex_lolbot_smoke-loader_stop_wannacry
- Size 453KB
- SHA256 d6d336036855c607eea6f5cc90f82b55651e2be1075b7731e8ac6310f2aa2064
- MD5 3c8f70c48fdd3f6d4107414cd3f59c03
- SHA1 c66278b1f5fe236f78419ccee400e780f5f5340e
- SHA512 0d0a0bdef63757520d13957adfe51a16a5e38b5a8e369e660fff683321ec923a297c3e68682d1d89107f32af910469fdbabca48ae4f216341a3fd354208df089
- SSDEEP 6144:y15rA29Vx18IcTgav1cdCTuoPbgwmOLJvKRwLSFXdFkry/sn:y1L9Vx6ISvO2x9mONvKRwLSFQry/sn
- TLSH T1EAA48E36AAD0C036D473457584A587BABAA5BD323311588FF391F71A1E227E3BA6070D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE