General
- Target 2026-05-31_d8f23251eeb53f2fb6cdbf60a0434691_amadey_coinminer_elex_smoke-loader_stealc_stop_wannacry
- Size 2.2MB
- Sample260531-cldsysaw7r
- SHA256 aa2ad15b5034d1b4473827c7347c8441b5a942eedd60da29709fe26ba5f3d135
- MD5 d8f23251eeb53f2fb6cdbf60a0434691
- SHA1 fab7108532ac2d055a349198595aeba725f50961
- SHA512 ea92fb04ac61f3675bf4d127cdd4f404bcf6d4ce48d37dd0c507780c529c4bb0a7f90db7da5df41824d5f8ea0eff7660cab17e6984c271f16687a1612a0b0e31
- SSDEEP 49152:QnVENPbcBVQej/1INRx+TSqTdX1HkQo6SAAW:QVOoBhz1aRxcSUDk36SAB
- TLSH T166B5F115A1E86B74E6F31EB2217B871047797E45899B928E1760A04F0C33F5CDEB2F29
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-31_d8f23251eeb53f2fb6cdbf60a0434691_amadey_coinminer_elex_smoke-loader_stealc_stop_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-31_d8f23251eeb53f2fb6cdbf60a0434691_amadey_coinminer_elex_smoke-loader_stealc_stop_wannacry.exe
Resource
win11-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-31_d8f23251eeb53f2fb6cdbf60a0434691_amadey_coinminer_elex_smoke-loader_stealc_stop_wannacry
- Size 2.2MB
- SHA256 aa2ad15b5034d1b4473827c7347c8441b5a942eedd60da29709fe26ba5f3d135
- MD5 d8f23251eeb53f2fb6cdbf60a0434691
- SHA1 fab7108532ac2d055a349198595aeba725f50961
- SHA512 ea92fb04ac61f3675bf4d127cdd4f404bcf6d4ce48d37dd0c507780c529c4bb0a7f90db7da5df41824d5f8ea0eff7660cab17e6984c271f16687a1612a0b0e31
- SSDEEP 49152:QnVENPbcBVQej/1INRx+TSqTdX1HkQo6SAAW:QVOoBhz1aRxcSUDk36SAB
- TLSH T166B5F115A1E86B74E6F31EB2217B871047797E45899B928E1760A04F0C33F5CDEB2F29
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Contacts a large (2181) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Executes dropped EXE