General

  • Target
    2026-07-04_852f1f74f448d65fa25a827d3c830e22_amadey_coinminer_elex_smoke-loader
  • Size 460KB
  • Sample260704-kar57sc17w
  • SHA256 4e1f9ebb52a1e59f0ea0bc652dd86e3e66bb591436ca30a0a1812cf31e20faef
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-07-04_852f1f74f448d65fa25a827d3c830e22_amadey_coinminer_elex_smoke-loader
    • Size 460KB
    • SHA256 4e1f9ebb52a1e59f0ea0bc652dd86e3e66bb591436ca30a0a1812cf31e20faef
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v16

Tasks