General
- Target 2026-08-19_b3bcda7477db49ebab37c69706509616_amadey_coinminer_elex_lolbot_smoke-loader_stop_wannacry
- Size 453KB
- Sample260819-e9qhrswhld
- SHA256 a6a005be04175c0904da2ca43beda305e5469f31479c579e27706e6eaddce622
- MD5 b3bcda7477db49ebab37c69706509616
- SHA1 9d0e4e9ae3222360f840abf6f042e7d620a527c6
- SHA512 e261c6f25b8da3791efc6d773034382df215cf32c090f87f3a6df5966c12ff52d47744369dbe980a81de976ef92bba23366c3bea31c406f1bf991ee81495adcd
- SSDEEP 6144:ye5rA29Vx18IcTgav1cdCTuoPbgwmOLJvKRwLSFXdFkry/so:yeL9Vx6ISvO2x9mONvKRwLSFQry/so
- TLSH T1C8A48E36AAD0C036D473457584A587BABEA5BD323311588FF391F71A1E227E3BA6070D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-19_b3bcda7477db49ebab37c69706509616_amadey_coinminer_elex_lolbot_smoke-loader_stop_wannacry.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-19_b3bcda7477db49ebab37c69706509616_amadey_coinminer_elex_lolbot_smoke-loader_stop_wannacry.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_b3bcda7477db49ebab37c69706509616_amadey_coinminer_elex_lolbot_smoke-loader_stop_wannacry
- Size 453KB
- SHA256 a6a005be04175c0904da2ca43beda305e5469f31479c579e27706e6eaddce622
- MD5 b3bcda7477db49ebab37c69706509616
- SHA1 9d0e4e9ae3222360f840abf6f042e7d620a527c6
- SHA512 e261c6f25b8da3791efc6d773034382df215cf32c090f87f3a6df5966c12ff52d47744369dbe980a81de976ef92bba23366c3bea31c406f1bf991ee81495adcd
- SSDEEP 6144:ye5rA29Vx18IcTgav1cdCTuoPbgwmOLJvKRwLSFXdFkry/so:yeL9Vx6ISvO2x9mONvKRwLSFQry/so
- TLSH T1C8A48E36AAD0C036D473457584A587BABEA5BD323311588FF391F71A1E227E3BA6070D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE