General
- Target 2026-08-14_e2ec3ba2b43f38864cf9208b85fb2676_amadey_coinminer_elex_lolbot_smoke-loader_stop_wannacry
- Size 453KB
- Sample260814-2s27katbkf
- SHA256 36428abbf89752c190c9fe74168daef1dfec094fede07354bcfe0bd2cdd687dc
- MD5 e2ec3ba2b43f38864cf9208b85fb2676
- SHA1 0b013ab91c56e37957e66b897c4e65119a9eb497
- SHA512 76a3feff47a61fe1cbfbfebae2013a1e6a9b7f63935f15fdb4a144e8e5a1a282659fa3b23c7affe4fca9ba7b33aede495bbb7396a24068413fae3d02fe184fde
- SSDEEP 6144:yk5rA29Vx18IcTgav1cdCTuoPbgwmOLJvKRwLSFXdFkry/sC:ykL9Vx6ISvO2x9mONvKRwLSFQry/sC
- TLSH T1A5A48E36AAD0C036D473457584A587BAFAA5BD323311588FF391F71A1E227E3BA6070D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-14_e2ec3ba2b43f38864cf9208b85fb2676_amadey_coinminer_elex_lolbot_smoke-loader_stop_wannacry.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-14_e2ec3ba2b43f38864cf9208b85fb2676_amadey_coinminer_elex_lolbot_smoke-loader_stop_wannacry.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-14_e2ec3ba2b43f38864cf9208b85fb2676_amadey_coinminer_elex_lolbot_smoke-loader_stop_wannacry
- Size 453KB
- SHA256 36428abbf89752c190c9fe74168daef1dfec094fede07354bcfe0bd2cdd687dc
- MD5 e2ec3ba2b43f38864cf9208b85fb2676
- SHA1 0b013ab91c56e37957e66b897c4e65119a9eb497
- SHA512 76a3feff47a61fe1cbfbfebae2013a1e6a9b7f63935f15fdb4a144e8e5a1a282659fa3b23c7affe4fca9ba7b33aede495bbb7396a24068413fae3d02fe184fde
- SSDEEP 6144:yk5rA29Vx18IcTgav1cdCTuoPbgwmOLJvKRwLSFXdFkry/sC:ykL9Vx6ISvO2x9mONvKRwLSFQry/sC
- TLSH T1A5A48E36AAD0C036D473457584A587BAFAA5BD323311588FF391F71A1E227E3BA6070D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE