General
- Target 2026-08-03_bbc33196540bda9b795442c19bdb5351_amadey_coinminer_elex_lolbot_smoke-loader_stop_wannacry
- Size 452KB
- Sample260803-m84m1axtet
- SHA256 bdf630ccd66de3790c02843e3840f2689b5615a6445b4a68145aa0b23b5fe3cf
- MD5 bbc33196540bda9b795442c19bdb5351
- SHA1 cbf406c4633a376c121de35765934901c2e77617
- SHA512 b821d5c64c6bdd8f3080a3645ec5d6550cb9a113f1cc37f91ab2c6a004eb458cde78178ce677e4f61b0b0f9c5d8b40e874bcd0ec7949e2a0d1b6343740a5dea0
- SSDEEP 6144:yq5rA29Vx18IcTgav1cdCTuoPbgwmOLJvKRwLSFXdFkryn:yqL9Vx6ISvO2x9mONvKRwLSFQryn
- TLSH T188A48E36AAD0C036D473457584A587BAFEA5BD323311588BF391F7191E227E3BA6070E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_bbc33196540bda9b795442c19bdb5351_amadey_coinminer_elex_lolbot_smoke-loader_stop_wannacry.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_bbc33196540bda9b795442c19bdb5351_amadey_coinminer_elex_lolbot_smoke-loader_stop_wannacry.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_bbc33196540bda9b795442c19bdb5351_amadey_coinminer_elex_lolbot_smoke-loader_stop_wannacry
- Size 452KB
- SHA256 bdf630ccd66de3790c02843e3840f2689b5615a6445b4a68145aa0b23b5fe3cf
- MD5 bbc33196540bda9b795442c19bdb5351
- SHA1 cbf406c4633a376c121de35765934901c2e77617
- SHA512 b821d5c64c6bdd8f3080a3645ec5d6550cb9a113f1cc37f91ab2c6a004eb458cde78178ce677e4f61b0b0f9c5d8b40e874bcd0ec7949e2a0d1b6343740a5dea0
- SSDEEP 6144:yq5rA29Vx18IcTgav1cdCTuoPbgwmOLJvKRwLSFXdFkryn:yqL9Vx6ISvO2x9mONvKRwLSFQryn
- TLSH T188A48E36AAD0C036D473457584A587BAFEA5BD323311588BF391F7191E227E3BA6070E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE