2026-09-09_5f42214f764eb06b6291d733c753f2a1_amadey_coinminer_elex_lolbot_smoke-loader_stop_wannacry

General

Target
2026-09-09_5f42214f764eb06b6291d733c753f2a1_amadey_coinminer_elex_lolbot_smoke-loader_stop_wannacry
Size 454KB
Sample260909-xt7ffsal71
SHA256 02883751233eec9a62dd47a61000868be8c476ec75ebbe6680f1010901a4b58e
MD5 5f42214f764eb06b6291d733c753f2a1
SHA1 5d09bcfc13da7e14f1202a6301cb57e18adbbf86
SHA512 736b5a468ee345f75640dceaa31062dbb5a17e6e39a7892dd8dfd5fe52d887259f62cdb6aff1189d5174ba51d37dcb0727148b58c9af04c41903ab80f254c0c1
SSDEEP 6144:yJ5rA29Vx18IcTgav1cdCTuoPbgwmOLJvKRwLSFXdFkry/sv:yJL9Vx6ISvO2x9mONvKRwLSFQry/sv
TLSH
T197A48E36AAD0C036D473457584A587BABEA5BD323311588FF391F71A1E227E3BA6070D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-09_5f42214f764eb06b6291d733c753f2a1_amadey_coinminer_elex_lolbot_smoke-loader_stop_wannacry

2026-09-09_5f42214f764eb06b6291d733c753f2a1_amadey_coinminer_elex_lolbot_smoke-loader_stop_wannacry

.exe 454KB

IMPHASH fe9b94dd0e4ea2a905fbd4f42f4b2f8f
SHA256 02883751233eec9a62dd47a61000868be8c476ec75ebbe6680f1010901a4b58e
MD5 5f42214f764eb06b6291d733c753f2a1
SHA1 5d09bcfc13da7e14f1202a6301cb57e18adbbf86
SHA512 736b5a468ee345f75640dceaa31062dbb5a17e6e39a7892dd8dfd5fe52d887259f62cdb6aff1189d5174ba51d37dcb0727148b58c9af04c41903ab80f254c0c1
SSDEEP 6144:yJ5rA29Vx18IcTgav1cdCTuoPbgwmOLJvKRwLSFXdFkry/sv:yJL9Vx6ISvO2x9mONvKRwLSFQry/sv
TLSH
T197A48E36AAD0C036D473457584A587BABEA5BD323311588FF391F71A1E227E3BA6070D
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

17312

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths