General
- Target 2026-07-06_19854a76d8a9d84be055fab711408b48_amadey_coinminer_elex_smoke-loader_stealc_stop
- Size 1.7MB
- Sample260706-2fewhacy4s
- SHA256 9a1956973bbb25d4ef02cb8d03f5a6423c42678856da3059d910c0c4ad7ce6ad
- MD5 19854a76d8a9d84be055fab711408b48
- SHA1 4d7bf53c14d63d5824a982d5d5cb446e0d7d74ef
- SHA512 88cfd0097a5aee4a0367eff4e2624a9aef38c4a0013d12e0ab6ddebda17942a08c5fc328459a67c4b438ba342f7d3270f0f745212093060df48d391a4dea10c4
- SSDEEP 24576:OEqTfpGTZ7UhPhrsX9xO8/I1ZWEe4Sz+vDEKmx313STB31H:bLEsugEeuDE53sTj
- TLSH T127858E523BF7C1BEE75312B10D39826E9AF6BA604B3587C7B7191E0D4A302D1AC39365
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-06_19854a76d8a9d84be055fab711408b48_amadey_coinminer_elex_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_19854a76d8a9d84be055fab711408b48_amadey_coinminer_elex_smoke-loader_stealc_stop.exe
Resource
win11ltsc2024-20260706-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_19854a76d8a9d84be055fab711408b48_amadey_coinminer_elex_smoke-loader_stealc_stop
- Size 1.7MB
- SHA256 9a1956973bbb25d4ef02cb8d03f5a6423c42678856da3059d910c0c4ad7ce6ad
- MD5 19854a76d8a9d84be055fab711408b48
- SHA1 4d7bf53c14d63d5824a982d5d5cb446e0d7d74ef
- SHA512 88cfd0097a5aee4a0367eff4e2624a9aef38c4a0013d12e0ab6ddebda17942a08c5fc328459a67c4b438ba342f7d3270f0f745212093060df48d391a4dea10c4
- SSDEEP 24576:OEqTfpGTZ7UhPhrsX9xO8/I1ZWEe4Sz+vDEKmx313STB31H:bLEsugEeuDE53sTj
- TLSH T127858E523BF7C1BEE75312B10D39826E9AF6BA604B3587C7B7191E0D4A302D1AC39365
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.