General
- Target 2026-04-17_0dd740ecffcb564667405868d0a6a4cc_amadey_coinminer_elex_smoke-loader_stealc_stop_tofsee
- Size 1.3MB
- Sample260417-rbk7lsbs4s
- SHA256 ce62c1e5870e0963b7790887329099c531f2f3126913848bd06c61ba4ed82337
- MD5 0dd740ecffcb564667405868d0a6a4cc
- SHA1 35162cf431d905e1c6c635d5056c0bf91ba5eb45
- SHA512 7d387a047f02c47abe16e2ef62bea09e6ddcdbc3d6471433c7a4796deeb6975ff0516cfaa3086c4628e456c9d629dd56fa25f13fd948ae4a8d3f2f7f470199ef
- SSDEEP 12288:7wKfOVRo9yRYRSOb9+F0yMUsvFFkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkj:7xWVeyRYsObg3Q1PgI
- TLSH T12655F601BFFD8148F4B727709D714AA50A66BC22FE74C55F7288370ECAB1B818925B67
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-17_0dd740ecffcb564667405868d0a6a4cc_amadey_coinminer_elex_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-17_0dd740ecffcb564667405868d0a6a4cc_amadey_coinminer_elex_smoke-loader_stealc_stop_tofsee.exe
Resource
win11-20260130-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-17_0dd740ecffcb564667405868d0a6a4cc_amadey_coinminer_elex_smoke-loader_stealc_stop_tofsee
- Size 1.3MB
- SHA256 ce62c1e5870e0963b7790887329099c531f2f3126913848bd06c61ba4ed82337
- MD5 0dd740ecffcb564667405868d0a6a4cc
- SHA1 35162cf431d905e1c6c635d5056c0bf91ba5eb45
- SHA512 7d387a047f02c47abe16e2ef62bea09e6ddcdbc3d6471433c7a4796deeb6975ff0516cfaa3086c4628e456c9d629dd56fa25f13fd948ae4a8d3f2f7f470199ef
- SSDEEP 12288:7wKfOVRo9yRYRSOb9+F0yMUsvFFkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkj:7xWVeyRYsObg3Q1PgI
- TLSH T12655F601BFFD8148F4B727709D714AA50A66BC22FE74C55F7288370ECAB1B818925B67
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory