General
- Target 2026-07-08_43297ecd8761506e330ea882c046495d_amadey_coinminer_elex_smoke-loader_stop
- Size 1.3MB
- Sample260708-lx4yysd16w
- SHA256 83e3eed872b95339677cab44481648aea486c4f7e4aa31b86d2df5f5699163be
- MD5 43297ecd8761506e330ea882c046495d
- SHA1 f5dc0aacadc4dfc85b43c800494b7762a1630534
- SHA512 7872e586c7d984ff3c00df12cc815396d89e6a58508ab1acad5a670aa704ba9fd86a6859d3cecb28e35a08d7bb533325f8c481f91257eccd59824cf03c7a0cc8
- SSDEEP 12288:etn3VwLjfZDmbVVV6mdBOv68n2TTcsjc0KAfex+xM0CzgJkTod:edVejfZDmbnwmdBO8TTLjc7PUMC0o
- TLSH T120558E117743EC37E0B254B6567EC2A6615C7E30072458CBB3C86E2E69F42D36E36A27
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-08_43297ecd8761506e330ea882c046495d_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-08_43297ecd8761506e330ea882c046495d_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win11ltsc2024-20260706-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_43297ecd8761506e330ea882c046495d_amadey_coinminer_elex_smoke-loader_stop
- Size 1.3MB
- SHA256 83e3eed872b95339677cab44481648aea486c4f7e4aa31b86d2df5f5699163be
- MD5 43297ecd8761506e330ea882c046495d
- SHA1 f5dc0aacadc4dfc85b43c800494b7762a1630534
- SHA512 7872e586c7d984ff3c00df12cc815396d89e6a58508ab1acad5a670aa704ba9fd86a6859d3cecb28e35a08d7bb533325f8c481f91257eccd59824cf03c7a0cc8
- SSDEEP 12288:etn3VwLjfZDmbVVV6mdBOv68n2TTcsjc0KAfex+xM0CzgJkTod:edVejfZDmbnwmdBO8TTLjc7PUMC0o
- TLSH T120558E117743EC37E0B254B6567EC2A6615C7E30072458CBB3C86E2E69F42D36E36A27
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.