General
- Target 2026-06-03_3a08957fe40d485d760e2644c6cbacfb_amadey_coinminer_elex_kwampirs_mafia_smoke-loader
- Size 293KB
- Sample260603-19fjfsey8z
- SHA256 903e37c7ec0eda6c5e7307c94bf495a131cb3e316a9f5213de372e130e57c73e
- MD5 3a08957fe40d485d760e2644c6cbacfb
- SHA1 7908c83b3147cb30d0ae9db7698b512533c8e71c
- SHA512 8d334327d01359b4c8ebe2b1c83e70bb759ef22abd82cbcdf9693cd67b412a3feb4c3daed0d6c04892992aa9efbb0c6cfac12285397be731e517de08de83f22e
- SSDEEP 6144:YNgF4DxNuJc06j4YBa77xMQxA5i5knmv1SL/mQXielPEYrnqSt:Yu4lNAtYytvS5Aku1YLicprnqS
- TLSH T146547D20B690C072F51B1D71897997BA8B3FA9354B3060C7A7DC1E399F662D39B3071A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-03_3a08957fe40d485d760e2644c6cbacfb_amadey_coinminer_elex_kwampirs_mafia_smoke-loader.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-03_3a08957fe40d485d760e2644c6cbacfb_amadey_coinminer_elex_kwampirs_mafia_smoke-loader.exe
Resource
win11-20260513-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-03_3a08957fe40d485d760e2644c6cbacfb_amadey_coinminer_elex_kwampirs_mafia_smoke-loader
- Size 293KB
- SHA256 903e37c7ec0eda6c5e7307c94bf495a131cb3e316a9f5213de372e130e57c73e
- MD5 3a08957fe40d485d760e2644c6cbacfb
- SHA1 7908c83b3147cb30d0ae9db7698b512533c8e71c
- SHA512 8d334327d01359b4c8ebe2b1c83e70bb759ef22abd82cbcdf9693cd67b412a3feb4c3daed0d6c04892992aa9efbb0c6cfac12285397be731e517de08de83f22e
- SSDEEP 6144:YNgF4DxNuJc06j4YBa77xMQxA5i5knmv1SL/mQXielPEYrnqSt:Yu4lNAtYytvS5Aku1YLicprnqS
- TLSH T146547D20B690C072F51B1D71897997BA8B3FA9354B3060C7A7DC1E399F662D39B3071A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.