General
- Target 2026-08-01_33cf4acd93bf916f3fc33a46520913eb_amadey_coinminer_elex_lolbot_smoke-loader_stop_wannacry
- Size 453KB
- Sample260801-m73djstbrc
- SHA256 cdea70d92ed0b3795bf2054802b8987812b92a321d1b661a21631d954649fcaa
- MD5 33cf4acd93bf916f3fc33a46520913eb
- SHA1 04b44de5c22decdfd5b71265a3637b5c0b92c9b5
- SHA512 82f8e8057f859dff767dd59c46c5d5baed66ab9b9bfec0ed943e85cb98068685b30fb9be7a30199eb637df572d661a030ebe3fb3df8e08b4651ee56d7e41565e
- SSDEEP 6144:yy5rA29Vx18IcTgav1cdCTuoPbgwmOLJvKRwLSFXdFkry/sz:yyL9Vx6ISvO2x9mONvKRwLSFQry/sz
- TLSH T1B9A48E36AAD0C036D473457584A587BAFAA5BD323311588FF391F71A1E227E3BA6070D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-01_33cf4acd93bf916f3fc33a46520913eb_amadey_coinminer_elex_lolbot_smoke-loader_stop_wannacry.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_33cf4acd93bf916f3fc33a46520913eb_amadey_coinminer_elex_lolbot_smoke-loader_stop_wannacry.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_33cf4acd93bf916f3fc33a46520913eb_amadey_coinminer_elex_lolbot_smoke-loader_stop_wannacry
- Size 453KB
- SHA256 cdea70d92ed0b3795bf2054802b8987812b92a321d1b661a21631d954649fcaa
- MD5 33cf4acd93bf916f3fc33a46520913eb
- SHA1 04b44de5c22decdfd5b71265a3637b5c0b92c9b5
- SHA512 82f8e8057f859dff767dd59c46c5d5baed66ab9b9bfec0ed943e85cb98068685b30fb9be7a30199eb637df572d661a030ebe3fb3df8e08b4651ee56d7e41565e
- SSDEEP 6144:yy5rA29Vx18IcTgav1cdCTuoPbgwmOLJvKRwLSFXdFkry/sz:yyL9Vx6ISvO2x9mONvKRwLSFQry/sz
- TLSH T1B9A48E36AAD0C036D473457584A587BAFAA5BD323311588FF391F71A1E227E3BA6070D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE