General
- Target 2026-08-03_e06079075482664b529dce3ad2b0abd9_amadey_coinminer_elex_lolbot_smoke-loader_stop_wannacry
- Size 453KB
- Sample260803-my922avekf
- SHA256 62ff6655782cb93ec938211e98ae7aa1c02561b43f8a4b4d1bea4a4942abec1f
- MD5 e06079075482664b529dce3ad2b0abd9
- SHA1 61ffbb9563ff748a1717c0e6f78f46f11e3fd913
- SHA512 dc31485eb82cfb09fd639f2c8c90b4541f00e2c1e8cdded0dc7e52744cf9100f76bedcc9968c5e54f34840b6254b3a21016ec42a0ce8fd067efd284e0363bfab
- SSDEEP 6144:yy5rA29Vx18IcTgav1cdCTuoPbgwmOLJvKRwLSFXdFkry/1:yyL9Vx6ISvO2x9mONvKRwLSFQry/1
- TLSH T167A48E36AAD0C036D473457584A587BAFAA5BD323311588FF391F71A1E227E3BA6070D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_e06079075482664b529dce3ad2b0abd9_amadey_coinminer_elex_lolbot_smoke-loader_stop_wannacry.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_e06079075482664b529dce3ad2b0abd9_amadey_coinminer_elex_lolbot_smoke-loader_stop_wannacry.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_e06079075482664b529dce3ad2b0abd9_amadey_coinminer_elex_lolbot_smoke-loader_stop_wannacry
- Size 453KB
- SHA256 62ff6655782cb93ec938211e98ae7aa1c02561b43f8a4b4d1bea4a4942abec1f
- MD5 e06079075482664b529dce3ad2b0abd9
- SHA1 61ffbb9563ff748a1717c0e6f78f46f11e3fd913
- SHA512 dc31485eb82cfb09fd639f2c8c90b4541f00e2c1e8cdded0dc7e52744cf9100f76bedcc9968c5e54f34840b6254b3a21016ec42a0ce8fd067efd284e0363bfab
- SSDEEP 6144:yy5rA29Vx18IcTgav1cdCTuoPbgwmOLJvKRwLSFXdFkry/1:yyL9Vx6ISvO2x9mONvKRwLSFQry/1
- TLSH T167A48E36AAD0C036D473457584A587BAFAA5BD323311588FF391F71A1E227E3BA6070D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE