General
- Target 2026-04-24_e4394eea27415fadb19435bd3ae2453f_amadey_coinminer_elex_mafia_smoke-loader
- Size 295KB
- Sample260424-vcy2msft3n
- SHA256 8794f7edb217795bd8024fe794aac4bd14bcd01540fef7b9a0decc53bb50a0c3
- MD5 e4394eea27415fadb19435bd3ae2453f
- SHA1 0f56f1c77fc5c7be05376d47451e7bed6a1a7d7a
- SHA512 c5dd4c4935a01eaee5abee682e25d2a773b0cbb147f032f9a3b15351cba54b4f6104e9172e8d8a0c5f2e5b4a5ab6abf4aeed52b5f4e7f0cf0130c1e3b586f2e5
- SSDEEP 6144:irwMKNS04IDKVqBMEkem+Vv0nQSDWicCfy/zc0BSCf2P:1tN10quOpv0nhDcCfWci+
- TLSH T186546B57F6C08132D01212BD4B669BB5983B6D32073828D7D39D3E2F5F966D1693832B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-24_e4394eea27415fadb19435bd3ae2453f_amadey_coinminer_elex_mafia_smoke-loader.exe
Resource
win10v2004-20260130-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-24_e4394eea27415fadb19435bd3ae2453f_amadey_coinminer_elex_mafia_smoke-loader.exe
Resource
win11-20260130-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-24_e4394eea27415fadb19435bd3ae2453f_amadey_coinminer_elex_mafia_smoke-loader
- Size 295KB
- SHA256 8794f7edb217795bd8024fe794aac4bd14bcd01540fef7b9a0decc53bb50a0c3
- MD5 e4394eea27415fadb19435bd3ae2453f
- SHA1 0f56f1c77fc5c7be05376d47451e7bed6a1a7d7a
- SHA512 c5dd4c4935a01eaee5abee682e25d2a773b0cbb147f032f9a3b15351cba54b4f6104e9172e8d8a0c5f2e5b4a5ab6abf4aeed52b5f4e7f0cf0130c1e3b586f2e5
- SSDEEP 6144:irwMKNS04IDKVqBMEkem+Vv0nQSDWicCfy/zc0BSCf2P:1tN10quOpv0nhDcCfWci+
- TLSH T186546B57F6C08132D01212BD4B669BB5983B6D32073828D7D39D3E2F5F966D1693832B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.