General
- Target 2026-08-10_ed7f46b0eee5963d82dad0b45d0cf694_amadey_coinminer_elex_kwampirs_mafia_smoke-loader
- Size 484KB
- Sample260810-1cn5bstxes
- SHA256 ee4a73ae21825126cc91b3474865c58c2104d601aff3927a74559b479cbd5143
- MD5 ed7f46b0eee5963d82dad0b45d0cf694
- SHA1 a51332ca21a4c1df4523d4f070a8aacde9c67096
- SHA512 95b88262a56c82a7c9c13225010fc7c7847a1631a83a658155c6254a95d43bc9bbd8a5d73bcf67c855be77ec4d7c2577e7be8f90b34ae57d1a39de394a084db5
- SSDEEP 12288:iu4lNAtYytvS5Aku1YLYxdkUoDj9JU01tuMsTp:iwhtvSLuleUoPo0uM
- TLSH T1C0B4CF21B690C033E51312754879A77A992FAA715B3095C797EC0E7EBF663C39B3034A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_ed7f46b0eee5963d82dad0b45d0cf694_amadey_coinminer_elex_kwampirs_mafia_smoke-loader.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_ed7f46b0eee5963d82dad0b45d0cf694_amadey_coinminer_elex_kwampirs_mafia_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_ed7f46b0eee5963d82dad0b45d0cf694_amadey_coinminer_elex_kwampirs_mafia_smoke-loader
- Size 484KB
- SHA256 ee4a73ae21825126cc91b3474865c58c2104d601aff3927a74559b479cbd5143
- MD5 ed7f46b0eee5963d82dad0b45d0cf694
- SHA1 a51332ca21a4c1df4523d4f070a8aacde9c67096
- SHA512 95b88262a56c82a7c9c13225010fc7c7847a1631a83a658155c6254a95d43bc9bbd8a5d73bcf67c855be77ec4d7c2577e7be8f90b34ae57d1a39de394a084db5
- SSDEEP 12288:iu4lNAtYytvS5Aku1YLYxdkUoDj9JU01tuMsTp:iwhtvSLuleUoPo0uM
- TLSH T1C0B4CF21B690C033E51312754879A77A992FAA715B3095C797EC0E7EBF663C39B3034A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.