General
- Target 2026-08-19_077d37ebb6dd1c471d43c2b2a43b39d7_amadey_coinminer_elex_lolbot_smoke-loader_stop_wannacry
- Size 454KB
- Sample260819-hdc5cazzf1
- SHA256 19826752598bc1dd74afea22b20ce7fe78fc9e1c007e2485318c776809bb07c4
- MD5 077d37ebb6dd1c471d43c2b2a43b39d7
- SHA1 b182277e1cb8d515734e9ded5735f644cbdbe59a
- SHA512 3842298a6030a1fa03d347c9fcece2ec4d931a7eb29bf4e7efc8aac7d47d6155fcc24c8308ff988c956dc20ff1e44f95fdbd4bdab4406ac6702a3e3ceee1bc8a
- SSDEEP 6144:yg5rA29Vx18IcTgav1cdCTuoPbgwmOLJvKRwLSFXdFkry/sB:ygL9Vx6ISvO2x9mONvKRwLSFQry/sB
- TLSH T16EA48E36AAD0C036D473457584A587BABEA5BD323311588FF391F71A1E227E3BA6070D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-19_077d37ebb6dd1c471d43c2b2a43b39d7_amadey_coinminer_elex_lolbot_smoke-loader_stop_wannacry.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-19_077d37ebb6dd1c471d43c2b2a43b39d7_amadey_coinminer_elex_lolbot_smoke-loader_stop_wannacry.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_077d37ebb6dd1c471d43c2b2a43b39d7_amadey_coinminer_elex_lolbot_smoke-loader_stop_wannacry
- Size 454KB
- SHA256 19826752598bc1dd74afea22b20ce7fe78fc9e1c007e2485318c776809bb07c4
- MD5 077d37ebb6dd1c471d43c2b2a43b39d7
- SHA1 b182277e1cb8d515734e9ded5735f644cbdbe59a
- SHA512 3842298a6030a1fa03d347c9fcece2ec4d931a7eb29bf4e7efc8aac7d47d6155fcc24c8308ff988c956dc20ff1e44f95fdbd4bdab4406ac6702a3e3ceee1bc8a
- SSDEEP 6144:yg5rA29Vx18IcTgav1cdCTuoPbgwmOLJvKRwLSFXdFkry/sB:ygL9Vx6ISvO2x9mONvKRwLSFQry/sB
- TLSH T16EA48E36AAD0C036D473457584A587BABEA5BD323311588FF391F71A1E227E3BA6070D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE