2026-08-09_bc26055c3b9424f4e2f956107846bc12_amadey_coinminer_elex_floxif_icedid_smoke-loader_stealc_stop

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-09_bc26055c3b9424f4e2f956107846bc12_amadey_coinminer_elex_floxif_icedid_smoke-loader_stealc_stop
Size 5.7MB
Sample260809-g9z4bawses
SHA256 2beb6a8af45fbe429c53a3048f3ac1a57d8ae15eda0072bb6dfac78729e39aea
MD5 bc26055c3b9424f4e2f956107846bc12
SHA1 28e51fdf58d2e408f17b5960f4527d13c2de387f
SHA512 a0c356841e2d8d577b093776c2153a9a19656942fbf6d07a332546bb72362a8545ac7c861b7af53a2f466800f49845a4ab2408d536807e4bbd91a1e87cc764da
SSDEEP 98304:dDFhG/X4VY8DhQUbvubx0m2MrSGBeRLeEvbPFf64hD4P7qyTLIj7Sz:dDuGSU8e8EV4P7qq2Sz
TLSH
T10F56BF90FB86CC77D161A5308967D77482A47E319EBB825F34947B2CFE722833928617
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Malware Config

Signatures

Codesign digest Mismatch 1 IoCs

File was altered after it was signed.

resource
2026-08-09_bc26055c3b9424f4e2f956107846bc12_amadey_coinminer_elex_floxif_icedid_smoke-loader_stealc_stop

File Explorer

2026-08-09_bc26055c3b9424f4e2f956107846bc12_amadey_coinminer_elex_floxif_icedid_smoke-loader_stealc_stop

.exe 5.7MB

2026-08-09_bc26055c3b9424f4e2f956107846bc12_amadey_coinminer_elex_floxif_icedid_smoke-loader_stealc_stop

IMPHASH 42d8a70c40b27f749786cc37228cdbb6
SHA256 2beb6a8af45fbe429c53a3048f3ac1a57d8ae15eda0072bb6dfac78729e39aea
MD5 bc26055c3b9424f4e2f956107846bc12
SHA1 28e51fdf58d2e408f17b5960f4527d13c2de387f
SHA512 a0c356841e2d8d577b093776c2153a9a19656942fbf6d07a332546bb72362a8545ac7c861b7af53a2f466800f49845a4ab2408d536807e4bbd91a1e87cc764da
SSDEEP 98304:dDFhG/X4VY8DhQUbvubx0m2MrSGBeRLeEvbPFf64hD4P7qyTLIj7Sz:dDuGSU8e8EV4P7qq2Sz
TLSH
T10F56BF90FB86CC77D161A5308967D77482A47E319EBB825F34947B2CFE722833928617
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Codesign digest Mismatch

File was altered after it was signed.

PE Signature issue

Digest

84:9e:4b:2a:72:71:0f:01:76:42:08:7b:b0:41:4b:8a:78:84:c3:67:ed:85:e3:f9:90:ed:86:87:dd:2a:1c:87

Digest Algorithm

sha256

PE Digests Matches

Not matched

Trusted

Signing Certificate

SERIALNUMBER=493 590 202 00047,CN=CPUID,O=CPUID,ST=Nord,C=FR,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024652

Chains

Jun 4, 2026

SERIALNUMBER=493 590 202 00047,CN=CPUID,O=CPUID,ST=Nord,C=FR,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024652

CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

SERIALNUMBER=493 590 202 00047,CN=CPUID,O=CPUID,ST=Nord,C=FR,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024652

CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Serial Number

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

May 25, 2021 - Dec 31, 2028

Subject

CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB

Serial Number

33:d7:08:a8:91:40:53:19:e2:a5:bb:d3:39:b9:ad:6e

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Mar 22, 2021 - Mar 21, 2036

Subject

SERIALNUMBER=493 590 202 00047,CN=CPUID,O=CPUID,ST=Nord,C=FR,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024652

Serial Number

a6:5d:6f:19:1c:7d:2d:22:5c:59:da:6d:93:13:7a:70

Issuer

CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jun 5, 2025 - Jun 4, 2028

Subject

CN=Sectigo Public Time Stamping Signer R36,O=Sectigo Limited,ST=West Yorkshire,C=GB

Serial Number

a4:29:3b:6e:1e:dd:d7:a7:34:08:87:ad:7a:4e:b7:24

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 27, 2025 - Mar 21, 2036

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Serial Number

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 22, 2021 - Mar 21, 2036

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Serial Number

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 22, 2021 - Jan 18, 2038

Minor OS version

Major OS version

Entry point

2254519

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\CPUID\cpuid2\cpu_z\cpu_z_en_vc2008\Release\cpuz_x32.pdb

winmm

PlaySoundW timeGetTime

kernel32

GetOEMCP IsValidCodePage LCMapStringA LCMapStringW InitializeCriticalSectionAndSpinCount GetConsoleOutputCP GetLocaleInfoA GetStringTypeA GetStringTypeW FindResourceW LoadResource SizeofResource LockResource GetCurrentDirectoryW GetComputerNameW SetCurrentDirectoryW CreateThread SetEvent WaitForSingleObject GetCurrentProcess GetCurrentThread SetPriorityClass SetThreadPriority HeapCreate ResumeThread Sleep GlobalFree GlobalAlloc GlobalReAlloc GlobalSize GetModuleHandleW GetProcAddress GetLastError LoadLibraryW SetLastError FreeLibrary InterlockedDecrement CloseHandle GetModuleFileNameW MultiByteToWideChar WideCharToMultiByte MulDiv GetLocalTime GetPriorityClass GetStdHandle ExitThread WriteConsoleW lstrcpyW lstrcatW GetACP WinExec GetVersionExW GetFileAttributesW GetCPInfo GetTimeZoneInformation GetStartupInfoA SetHandleCount GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW GetFileType SetStdHandle HeapSize VirtualQuery ExitProcess HeapReAlloc RtlUnwind RaiseException HeapAlloc GetSystemTimeAsFileTime IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter TerminateProcess GetStartupInfoW SearchPathW GetProfileIntW GetTempFileNameW GetFileTime GetFileSizeEx FileTimeToLocalFileTime SetErrorMode GetFullPathNameW GetVolumeInformationW FindFirstFileW FindClose DuplicateHandle SetEndOfFile UnlockFile LockFile WritePrivateProfileStringW GlobalFlags lstrlenA GetConsoleMode GetConsoleCP lstrlenW HeapDestroy GlobalGetAtomNameW CreateDirectoryW GetTempPathW GetTickCount FindResourceExW InterlockedIncrement TlsFree LocalReAlloc TlsSetValue TlsAlloc GlobalHandle TlsGetValue GetFileSize DeleteCriticalSection ConvertDefaultLocale EnumResourceLanguagesW lstrcmpA GetLocaleInfoW CompareStringA InterlockedExchange GlobalAddAtomW GlobalFindAtomW GlobalDeleteAtom CompareStringW lstrcmpW GetCurrentThreadId FreeResource GetCurrentProcessId VirtualProtect CopyFileW GlobalLock GlobalUnlock FormatMessageW PurgeComm GetCommState GetCommTimeouts lstrcmpiA VerSetConditionMask VerifyVersionInfoW GetSystemDirectoryA CreateToolhelp32Snapshot Process32First GetProcessTimes Process32Next SetEnvironmentVariableA GetThreadPriority GetOverlappedResult SetDllDirectoryA CancelIo CreateEventA FileTimeToSystemTime VirtualAlloc VirtualFree GetDiskFreeSpaceA LocalAlloc LocalFree QueryPerformanceFrequency QueryPerformanceCounter OpenProcess WriteConsoleA SetFilePointer CreateDirectoryA GetModuleHandleA FindResourceA DeleteFileA GetTempPathA ReadFile GetComputerNameA CreateFileA OpenMutexA CreateMutexA GetVersionExA GetSystemInfo LoadLibraryA DeviceIoControl GetCurrentDirectoryA GetModuleFileNameA ReleaseMutex GetProcessHeap HeapFree FlushFileBuffers WriteFile CreateFileW InterlockedExchangeAdd ReleaseSemaphore CreateSemaphoreW WaitForMultipleObjects InitializeCriticalSection LeaveCriticalSection EnterCriticalSection QueueUserAPC WaitForSingleObjectEx SetThreadAffinityMask ResetEvent CreateEventW GlobalMemoryStatus

user32

GetUpdateRect CharUpperBuffW RegisterClipboardFormatW UpdateLayeredWindow EnableScrollBar CreateAcceleratorTableW GetKeyboardState GetKeyboardLayout ToUnicodeEx CopyAcceleratorTableW DestroyAcceleratorTable SetClassLongW GetDoubleClickTime CopyIcon GetIconInfo SetCursorPos GetMenuDefaultItem SetMenuDefaultItem IsMenu SetParent LockWindowUpdate IsZoomed NotifyWinEvent MessageBeep GetSystemMenu UnpackDDElParam ReuseDDElParam LoadAcceleratorsW InsertMenuItemW BringWindowToTop TranslateAcceleratorW UnionRect RedrawWindow SetWindowRgn DrawIconEx CharUpperW DeleteMenu WaitMessage SetCapture LoadCursorW GetSysColorBrush UnregisterClassW CopyImage SetRectEmpty DrawStateW DestroyMenu GetMenuItemInfoW ShowOwnedPopups PostQuitMessage MapVirtualKeyW GetKeyNameTextW LoadMenuW LoadIconW SendDlgItemMessageA WinHelpW IsChild GetClassLongW GetClassNameW GetForegroundWindow BeginDeferWindowPos EndDeferWindowPos GetTopWindow GetMessageTime GetMessagePos MapWindowPoints ScrollWindow SetMenu SetScrollRange GetScrollRange ShowScrollBar CreateWindowExW GetClassInfoExW GetClassInfoW RegisterClassW AdjustWindowRectEx EqualRect DeferWindowPos GetScrollInfo SubtractRect SetWindowPlacement DefWindowProcW CallWindowProcW GetMenu IntersectRect SystemParametersInfoA GetWindowPlacement SetMenuItemBitmaps GetMenuCheckMarkDimensions SetWindowsHookExW CallNextHookEx GetMessageW TranslateMessage DispatchMessageW IsWindowVisible PeekMessageW ValidateRect GetKeyState GetCursorPos MoveWindow GetDlgCtrlID SetWindowTextW IsDialogMessageW SetDlgItemTextW SetDlgItemInt SendDlgItemMessageW CheckDlgButton GetDesktopWindow CreateDialogIndirectParamW DestroyWindow IsWindow GetNextDlgTabItem EndDialog GetWindowTextLengthW GetWindowTextW GetScrollPos SetScrollPos GetWindow EndPaint BeginPaint ScreenToClient GrayStringW DrawTextExW DrawTextW TabbedTextOutW GetWindowThreadProcessId GetLastActivePopup SetPropW GetCapture GetActiveWindow SetActiveWindow MapDialogRect SetWindowPos ShowWindow GetPropW RemovePropW GetAsyncKeyState GetFocus SetFocus GetDlgItem IsWindowEnabled GetMenuState GetMenuStringW GetMenuItemID InsertMenuW GetMenuItemCount GetSubMenu IsClipboardFormatAvailable DefFrameProcW DefMDIChildProcW DrawMenuBar TranslateMDISysAccel PostThreadMessageW IsCharLowerW MapVirtualKeyExW GetNextDlgGroupItem CreateMenu UnhookWindowsHookEx wsprintfA ModifyMenuW WindowFromPoint PostMessageW ReleaseCapture DrawEdge FrameRect DrawFrameControl FillRect GetWindowRgn SetScrollInfo CheckMenuItem EnableMenuItem RemoveMenu AppendMenuW ClientToScreen CreatePopupMenu CreateCursor SetCursor DestroyCursor UpdateWindow SetRect OffsetRect DrawIcon GetSystemMetrics IsIconic MessageBoxW wsprintfW SystemParametersInfoW InflateRect DrawFocusRect GetSysColor IsRectEmpty CopyRect GetParent PtInRect DestroyIcon SetWindowLongW GetWindowLongW LoadImageW ReleaseDC CloseClipboard SetClipboardData EmptyClipboard OpenClipboard GetClientRect GetDC GetWindowDC KillTimer SetTimer InvalidateRect EnableWindow GetWindowRect SetForegroundWindow LoadBitmapW SendMessageW RegisterWindowMessageW TrackPopupMenu

gdi32

ExtTextOutW Escape SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SetWindowOrgEx OffsetWindowOrgEx SetWindowExtEx ScaleWindowExtEx ExtSelectClipRgn DeleteDC CreatePatternBrush GetObjectType CreatePen CreateHatchBrush GetDCOrgEx CreateRectRgnIndirect PatBlt SetRectRgn CombineRgn DPtoLP SetDIBColorTable StretchBlt CreateDIBSection GetTextMetricsW EnumFontFamiliesExW CreateEllipticRgn CreatePolygonRgn TextOutW GetTextColor Polyline Ellipse Polygon CreateDIBitmap EnumFontFamiliesW GetTextCharsetInfo Rectangle CreateRoundRectRgn OffsetRgn SelectObject GetRgnBox GetPaletteEntries RoundRect ExtFloodFill SetPaletteEntries GetViewportOrgEx LPtoDP PtInRegion FillRgn FrameRgn GetBoundsRect GetNearestPaletteIndex GetWindowOrgEx GetTextFaceW SetPixelV PtVisible RectVisible GetWindowExtEx GetViewportExtEx CreateRectRgn SelectClipRgn DeleteObject SetTextAlign MoveToEx LineTo IntersectClipRect ExcludeClipRect GetClipBox SetMapMode SetTextColor SetROP2 SetPolyFillMode SetBkMode SetBkColor RestoreDC SaveDC CreateCompatibleDC CreateCompatibleBitmap BitBlt GetDeviceCaps GetSystemPaletteEntries CreatePalette GetStockObject GetObjectW SelectPalette RealizePalette GetDIBits GetTextExtentPoint32W CreateFontW CreateBitmap GetPixel CreateFontIndirectW GetCurrentObject SetPixel CreateDCA GetBkColor CopyMetaFileW CreateSolidBrush

msimg32

TransparentBlt AlphaBlend

comdlg32

GetFileTitleW

winspool.drv

ClosePrinter OpenPrinterW DocumentPropertiesW

advapi32

GetLengthSid RegQueryValueW RegCloseKey OpenProcessToken AdjustTokenPrivileges LookupPrivilegeValueA CloseServiceHandle CreateServiceW DeleteService RegEnumKeyExW RegDeleteValueW RegSetValueExW RegCreateKeyExW RegOpenKeyW RegEnumKeyW RegDeleteKeyW RegQueryValueExW ImpersonateSelf OpenThreadToken AllocateAndInitializeSid InitializeSecurityDescriptor RegOpenKeyExW InitializeAcl AddAccessAllowedAce SetSecurityDescriptorDacl SetSecurityDescriptorGroup SetSecurityDescriptorOwner IsValidSecurityDescriptor AccessCheck FreeSid RevertToSelf RegOpenKeyExA RegQueryInfoKeyA RegEnumKeyExA RegQueryValueExA OpenSCManagerA ControlService StartServiceA OpenServiceA

shell32

SHGetPathFromIDListW SHGetFileInfoW SHAppBarMessage DragFinish DragQueryFileW SHBrowseForFolderW ShellExecuteW

comctl32

ImageList_GetIconSize

shlwapi

PathAppendW PathFindExtensionW PathFindFileNameW PathStripToRootW PathRemoveFileSpecW PathIsUNCW

ole32

IsAccelerator OleTranslateAccelerator OleDestroyMenuDescriptor OleCreateMenuDescriptor OleLockRunning OleGetClipboard RevokeDragDrop CoLockObjectExternal RegisterDragDrop DoDragDrop CreateStreamOnHGlobal OleDuplicateData CoTaskMemAlloc ReleaseStgMedium CoTaskMemFree CoInitializeSecurity CoSetProxyBlanket CoInitializeEx CoCreateInstance CoUninitialize StringFromGUID2

oleaut32

SysAllocStringLen SysStringLen VariantInit VariantClear VariantChangeType SysFreeString SysStringByteLen SysAllocStringByteLen SysAllocString

gdiplus

GdipDrawImageI GdipGetImageGraphicsContext GdiplusShutdown GdiplusStartup GdipBitmapUnlockBits GdipBitmapLockBits GdipCreateBitmapFromScan0 GdipCreateBitmapFromStreamICM GdipCreateBitmapFromStream GdipGetImagePalette GdipGetImagePaletteSize GdipGetImagePixelFormat GdipGetImageHeight GdipGetImageWidth GdipDisposeImage GdipDeleteGraphics GdipAlloc GdipFree GdipCloneImage

imm32

ImmGetOpenStatus ImmGetContext ImmReleaseContext

iphlpapi

GetIfEntry GetAdaptersInfo

psapi

GetProcessMemoryInfo

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-09_bc26055c3b9424f4e2f956107846bc12_amadey_coinminer_elex_floxif_icedid_smoke-loader_stealc_stop

PE Signature issue

winmm

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

gdiplus

imm32

iphlpapi

psapi

generic