124c592b500d7e89c23ca29e08cca6d49d063b53f62dcb3211c715ae1bbb763c

Sharing

Copy URL Twitter E-mail

General

Target
2026-05-29_489a2039d7b72df19aa1ee7d5ef27dc6_amadey_cloudeye_coinminer_elex_hijackloader_smoke-loader
Size 529KB
Sample260529-bc8rasfs7n
SHA256 124c592b500d7e89c23ca29e08cca6d49d063b53f62dcb3211c715ae1bbb763c
MD5 489a2039d7b72df19aa1ee7d5ef27dc6
SHA1 5106488bbf5278c9f7affaeeb1e772d37ea3bdaa
SHA512 930a83c81ed87f7ef90651f55299c529a6e82b41624e07c892acea76a662859e71d94a5db7ef6bbdffb7d1167acf03c7051f8b4d8cb7f0795a53e95b90ed9bec
SSDEEP 12288:RW2DnioX4iBX2+kwFX47D4WChtt4NTrh93oWnI7wtBc:pDnNl5IVTRPc
TLSH
T1FBB44A02F7D08E36E5B29A76D9B7569A4735BD42AF22535F6304F60C38F2600DEB1329
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  2026-05-29_489a2039d7b72df19aa1ee7d5ef27dc6_amadey_cloudeye_coinminer_elex_hijackloader_smoke-loader
- Size 529KB
- SHA256 124c592b500d7e89c23ca29e08cca6d49d063b53f62dcb3211c715ae1bbb763c
- MD5 489a2039d7b72df19aa1ee7d5ef27dc6
- SHA1 5106488bbf5278c9f7affaeeb1e772d37ea3bdaa
- SHA512 930a83c81ed87f7ef90651f55299c529a6e82b41624e07c892acea76a662859e71d94a5db7ef6bbdffb7d1167acf03c7051f8b4d8cb7f0795a53e95b90ed9bec
- SSDEEP 12288:RW2DnioX4iBX2+kwFX47D4WChtt4NTrh93oWnI7wtBc:pDnNl5IVTRPc
- TLSH
  T1FBB44A02F7D08E36E5B29A76D9B7569A4735BD42AF22535F6304F60C38F2600DEB1329
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

9^/10

defense_evasion discovery execution upx
- UPX dump on OEP (original entry point)
- Stops running service(s)
  defense_evasion execution
- Deletes itself
- Enumerates processes with tasklist
  discovery
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2
- Target
  $PLUGINSDIR/AccessControl.dll
- Size 19KB
- SHA256 941322a98820d73533bdfd8376db8567dfb9758e92867d36be5b9b1d08327b63
- MD5 931e0b48d95415c29626569a860e6327
- SHA1 f5f60d01cf69bb3fa0a49e0edd332ac9e5741973
- SHA512 cf3235f66c2ff76a81a03b6ce49b0a670a2fe5755403c026db1bccfb732c271a26c79b97372484b92e7398d820455d613d255d9e9affcd5bf6864727132f9e08
- SSDEEP 384:1hM+zbbpfRWZGXHHQIYizr3a5BG8gSJIVE8E9VF0NyTz:nLbppWZGXn5YizTafhB2EF
- TLSH
  T1A2929E138A741C16DC5B8FB675C4CC39AE39BE518EE0C6D2110DC5994BD0342ABDA3BD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

9^/10

discovery upx
- UPX dump on OEP (original entry point)
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral3 behavioral4
- Target
  $PLUGINSDIR/ExecDos.dll
- Size 18KB
- SHA256 d61a8d29ff9965c48d7a59cc6d97a21044721ead839613156f9ac768e93450c7
- MD5 a62969695859e1aa4a9c3b3dbb2e1e1c
- SHA1 563822d6ae1df66791dd6eeead1771ae8c123a0f
- SHA512 f6ce54afe5d58ab382f3bfc6eb59311b4c4001c1da35da3a133c6933f95f8e2d04f080a04833035a682ae12157f5ac6a9db3e2c7e35812981e36ae21615788b4
- SSDEEP 384:RCqAUtwYjH1cEXhVHQIYizr3a5Uz6RcCSJIVE8E9VF0NyPR:RFcIFhZ5YizTa6zsc2Er
- TLSH
  T133826C7286A01C13CD7B4E3039D0963BAFB5B9524E50C5E7521AC5C54B90B82FFA92BE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  $PLUGINSDIR/LangDLL.dll
- Size 5KB
- SHA256 09acfc5ee34a1dfa1af3a9d34f00c3b1327b56641feebd536e13752349c08ac8
- MD5 014a3be4a7c1ccb217916dbf4f222bd1
- SHA1 9b4c41eb0e84886beb5591d8357155e27f9c68ed
- SHA512 0f3d1bf548e29a136150b699665a3f22c6ea2821701737363fa2920b51c391d735f1eae92dea8af655e7d07304bd3d06e4aff3f5a82fa22bcf5d1690013eb922
- SSDEEP 48:S46+/iTKYKxbWsptIpBtWZ0iV8jAWiAJCvxft2O2B8mMofjLl:zsuPbOBtWZBV8jAWiAJCdv2CmfL
- TLSH
  T143C19470F3C248B9C491413368E737D36612EE746784500F9B6311AA38209E7AD3EBC3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  $PLUGINSDIR/Processes.dll
- Size 61KB
- SHA256 5f0c517734dfdcd5ea26088d59dcce8dbe5bc625a0027cbd1846566c9a52b447
- MD5 8bc9dda307f248388d361771eb83fd49
- SHA1 af1b7ec663ace0d4a120f1e7006afa4c52ba403a
- SHA512 27e4daabffdcd9e0a9f58600b8b30a7c5322dd936d15ddb2a07a55fc51ef53d0d40a62cd7542acedc24745ad18f1c6498ea7c623903f093e0d6dd282d7b2c77b
- SSDEEP 1536:5xKHTc7duewxwUMtLk/4HIPRksvGILb7zTaZiN:8IduTWnI5vGAHTIu
- TLSH
  T1C3536C12A350C436E15B593064E8C2725E7E7C226AF494CB7B9903B95FB03D0FA793B6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  $PLUGINSDIR/RemoveSelfSignedCertificate.ps1
- Size 1KB
- SHA256 5ee93c360e91f4753026d47e2e8cf3e7b2bc306e9992fccb88b56fb3e7c718fb
- MD5 317869d5d52e8de74062662898851f4d
- SHA1 c8167809f3652809ebeb984f8c1418e15bde0a98
- SHA512 42b92401c7e5275444cbaa0bcec9e28fa4735ef573d71e3371082156153ab003ece6365e92336b9e6a88f9166cad87354de4882a0acf055573b9e17df9a29627
- TLSH
  T151217D1422C2A9702FB163A6D503848AF957807B83767D41B1DE80DC5B23C3BD7E855A
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 7a9ddee34562cd3703f1502b5c70e99cd5bba15de2b6845a3555033d7f6cb2a5
- MD5 564bb0373067e1785cba7e4c24aab4bf
- SHA1 7c9416a01d821b10b2eef97b80899d24014d6fc1
- SHA512 22c61a323cb9293d7ec5c7e7e60674d0e2f7b29d55be25eb3c128ea2cd7440a1400cee17c43896b996278007c0d247f331a9b8964e3a40a0eb1404a9596c4472
- SSDEEP 192:nenY0qWTlt70IAj/lQ0sEWc/wtYbBH2aDybC7y+XBDIwL:n8+Qlt70Fj/lQRY/9VjjfL
- TLSH
  T1F6427D1193B089F2F590593805A67F2A6FBEAC5C27E44963CFE345853D702DFA47A243
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 6bf9cccd8a600f4d442efe201e8c07b49605ba35f49a4b3ab22fa2641748e156
- MD5 48f3e7860e1de2b4e63ec744a5e9582a
- SHA1 420c64d802a637c75a53efc8f748e1aede3d6dc6
- SHA512 28716ddea580eeb23d93d1ff6ea0cf79a725e13c8f8a17ec9dfacb1fe29c7981ad84c03aed05663adc52365d63d19ec2f366762d1c685e3a9d93037570c3c583
- SSDEEP 96:oFsvUu3Uy+sytcS8176b+XR8pCHFcMcxSgB5PKtAtgt+Nt+rnt3DVEB3YuNqkzfS:oFsvWyNO81b8pCHFcM0PuAgkOywIFc
- TLSH
  T19112F992E5A450B3C5D6533A35AA2F2DCBBD5329B0926C00C7738E4D39355B66E38343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  $PLUGINSDIR/nsExec.dll
- Size 7KB
- SHA256 5e66489393f159aa0fd30b630bb345d03418e9324e7d834b2e4195865a637cfe
- MD5 4c77a65bb121bb7f2910c1fa3cb38337
- SHA1 94531e3c6255125c1a85653174737d275bc35838
- SHA512 df50eadf312469c56996c67007d31b85d00e91a4f40355e786536fc0336ac9c2fd8ad9df6e65ab390cc6f031aca28c92212ea23cc40eb600b82a63be3b5b8c04
- SSDEEP 96:JXmkmwmHDqaRrlfAF4IUIqhmKv6vBckXK9wSBl8gvElHturnNQaSGYuHr2DCP:JAjRrlfA6Nv6eWIElNurnNQZGdHc
- TLSH
  T190E14A3535C03DF7D08D48707C1A2E1B93F0C9321BBA01A08A6B19D576E2AE7F938742
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral17 behavioral18