2026-06-03_3a08957fe40d485d760e2644c6cbacfb_amadey_coinminer_elex_kwampirs_mafia_smoke-loader

Sharing

Copy URL Twitter E-mail

General

Target
2026-06-03_3a08957fe40d485d760e2644c6cbacfb_amadey_coinminer_elex_kwampirs_mafia_smoke-loader
Size 293KB
Sample260603-19fjfsey8z
SHA256 903e37c7ec0eda6c5e7307c94bf495a131cb3e316a9f5213de372e130e57c73e
MD5 3a08957fe40d485d760e2644c6cbacfb
SHA1 7908c83b3147cb30d0ae9db7698b512533c8e71c
SHA512 8d334327d01359b4c8ebe2b1c83e70bb759ef22abd82cbcdf9693cd67b412a3feb4c3daed0d6c04892992aa9efbb0c6cfac12285397be731e517de08de83f22e
SSDEEP 6144:YNgF4DxNuJc06j4YBa77xMQxA5i5knmv1SL/mQXielPEYrnqSt:Yu4lNAtYytvS5Aku1YLicprnqS
TLSH
T146547D20B690C072F51B1D71897997BA8B3FA9354B3060C7A7DC1E399F662D39B3071A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-06-03_3a08957fe40d485d760e2644c6cbacfb_amadey_coinminer_elex_kwampirs_mafia_smoke-loader

File Explorer

2026-06-03_3a08957fe40d485d760e2644c6cbacfb_amadey_coinminer_elex_kwampirs_mafia_smoke-loader

.exe 293KB

2026-06-03_3a08957fe40d485d760e2644c6cbacfb_amadey_coinminer_elex_kwampirs_mafia_smoke-loader

IMPHASH 1c987a054a75dee2dd9dc04e22456d2f
SHA256 903e37c7ec0eda6c5e7307c94bf495a131cb3e316a9f5213de372e130e57c73e
MD5 3a08957fe40d485d760e2644c6cbacfb
SHA1 7908c83b3147cb30d0ae9db7698b512533c8e71c
SHA512 8d334327d01359b4c8ebe2b1c83e70bb759ef22abd82cbcdf9693cd67b412a3feb4c3daed0d6c04892992aa9efbb0c6cfac12285397be731e517de08de83f22e
SSDEEP 6144:YNgF4DxNuJc06j4YBa77xMQxA5i5knmv1SL/mQXielPEYrnqSt:Yu4lNAtYytvS5Aku1YLicprnqS
TLSH
T146547D20B690C072F51B1D71897997BA8B3FA9354B3060C7A7DC1E399F662D39B3071A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

100626

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

E:\PCProjects\Pakages\Pakage1.0\AICONExe\Release\AICONExe.pdb

user32

GetSystemMetrics PostMessageW

advapi32

RegOpenKeyW RegCloseKey RegEnumValueA RegOpenKeyExA

shell32

ShellExecuteA

ws2_32

getsockopt socket gethostbyname closesocket __WSAFDIsSet recv htons select WSAStartup connect inet_ntoa send

netapi32

Netbios

kernel32

CompareStringW SetEnvironmentVariableA GetModuleHandleW WriteConsoleW HeapReAlloc GetStringTypeW IsValidLocale EnumSystemLocalesA GetLocaleInfoA GetUserDefaultLCID GetLocaleInfoW FlushFileBuffers GetConsoleMode GetConsoleCP SetStdHandle GetTimeZoneInformation IsValidCodePage GetOEMCP GetACP HeapSize IsProcessorFeaturePresent IsDebuggerPresent UnhandledExceptionFilter GetCurrentProcessId InitializeCriticalSection LeaveCriticalSection EnterCriticalSection DeleteCriticalSection SetFilePointer WriteFile ReadFile CreateFileW GetLastError CloseHandle Sleep CreateThread GetCommandLineA CreateMutexW WaitForSingleObject ReleaseMutex FindResourceA FreeLibrary LoadResource UpdateResourceA EndUpdateResourceW EnumResourceTypesA SizeofResource EnumResourceLanguagesA SetLastError BeginUpdateResourceW LoadLibraryA LockResource BeginUpdateResourceA UpdateResourceW EnumResourceNamesA EndUpdateResourceA WideCharToMultiByte MultiByteToWideChar GetCurrentProcess LoadLibraryW GetVersionExW GetFileAttributesA TerminateProcess GetProcAddress GetSystemInfo InterlockedIncrement InterlockedDecrement EncodePointer DecodePointer InterlockedExchange GetCommandLineW HeapSetInformation GetSystemTimeAsFileTime HeapFree HeapAlloc RaiseException RtlUnwind LCMapStringW GetCPInfo SetUnhandledExceptionFilter ExitProcess GetStdHandle GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType GetStartupInfoW TlsAlloc TlsGetValue TlsSetValue TlsFree GetCurrentThreadId HeapCreate QueryPerformanceCounter GetTickCount

Sharing

General

Malware Config

Signatures

File Explorer

2026-06-03_3a08957fe40d485d760e2644c6cbacfb_amadey_coinminer_elex_kwampirs_mafia_smoke-loader

user32

advapi32

shell32

ws2_32

netapi32

kernel32

generic