General
- Target 2026-09-09_5f42214f764eb06b6291d733c753f2a1_amadey_coinminer_elex_lolbot_smoke-loader_stop_wannacry
- Size 454KB
- Sample260909-xt7ffsal71
- SHA256 02883751233eec9a62dd47a61000868be8c476ec75ebbe6680f1010901a4b58e
- MD5 5f42214f764eb06b6291d733c753f2a1
- SHA1 5d09bcfc13da7e14f1202a6301cb57e18adbbf86
- SHA512 736b5a468ee345f75640dceaa31062dbb5a17e6e39a7892dd8dfd5fe52d887259f62cdb6aff1189d5174ba51d37dcb0727148b58c9af04c41903ab80f254c0c1
- SSDEEP 6144:yJ5rA29Vx18IcTgav1cdCTuoPbgwmOLJvKRwLSFXdFkry/sv:yJL9Vx6ISvO2x9mONvKRwLSFQry/sv
- TLSH T197A48E36AAD0C036D473457584A587BABEA5BD323311588FF391F71A1E227E3BA6070D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-09_5f42214f764eb06b6291d733c753f2a1_amadey_coinminer_elex_lolbot_smoke-loader_stop_wannacry.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-09_5f42214f764eb06b6291d733c753f2a1_amadey_coinminer_elex_lolbot_smoke-loader_stop_wannacry.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-09_5f42214f764eb06b6291d733c753f2a1_amadey_coinminer_elex_lolbot_smoke-loader_stop_wannacry
- Size 454KB
- SHA256 02883751233eec9a62dd47a61000868be8c476ec75ebbe6680f1010901a4b58e
- MD5 5f42214f764eb06b6291d733c753f2a1
- SHA1 5d09bcfc13da7e14f1202a6301cb57e18adbbf86
- SHA512 736b5a468ee345f75640dceaa31062dbb5a17e6e39a7892dd8dfd5fe52d887259f62cdb6aff1189d5174ba51d37dcb0727148b58c9af04c41903ab80f254c0c1
- SSDEEP 6144:yJ5rA29Vx18IcTgav1cdCTuoPbgwmOLJvKRwLSFXdFkry/sv:yJL9Vx6ISvO2x9mONvKRwLSFQry/sv
- TLSH T197A48E36AAD0C036D473457584A587BABEA5BD323311588FF391F71A1E227E3BA6070D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE