2026-08-10_ed7f46b0eee5963d82dad0b45d0cf694_amadey_coinminer_elex_kwampirs_mafia_smoke-loader

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-10_ed7f46b0eee5963d82dad0b45d0cf694_amadey_coinminer_elex_kwampirs_mafia_smoke-loader
Size 484KB
Sample260810-1cn5bstxes
SHA256 ee4a73ae21825126cc91b3474865c58c2104d601aff3927a74559b479cbd5143
MD5 ed7f46b0eee5963d82dad0b45d0cf694
SHA1 a51332ca21a4c1df4523d4f070a8aacde9c67096
SHA512 95b88262a56c82a7c9c13225010fc7c7847a1631a83a658155c6254a95d43bc9bbd8a5d73bcf67c855be77ec4d7c2577e7be8f90b34ae57d1a39de394a084db5
SSDEEP 12288:iu4lNAtYytvS5Aku1YLYxdkUoDj9JU01tuMsTp:iwhtvSLuleUoPo0uM
TLSH
T1C0B4CF21B690C033E51312754879A77A992FAA715B3095C797EC0E7EBF663C39B3034A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-10_ed7f46b0eee5963d82dad0b45d0cf694_amadey_coinminer_elex_kwampirs_mafia_smoke-loader

File Explorer

2026-08-10_ed7f46b0eee5963d82dad0b45d0cf694_amadey_coinminer_elex_kwampirs_mafia_smoke-loader

.exe 484KB

2026-08-10_ed7f46b0eee5963d82dad0b45d0cf694_amadey_coinminer_elex_kwampirs_mafia_smoke-loader

IMPHASH 1c987a054a75dee2dd9dc04e22456d2f
SHA256 ee4a73ae21825126cc91b3474865c58c2104d601aff3927a74559b479cbd5143
MD5 ed7f46b0eee5963d82dad0b45d0cf694
SHA1 a51332ca21a4c1df4523d4f070a8aacde9c67096
SHA512 95b88262a56c82a7c9c13225010fc7c7847a1631a83a658155c6254a95d43bc9bbd8a5d73bcf67c855be77ec4d7c2577e7be8f90b34ae57d1a39de394a084db5
SSDEEP 12288:iu4lNAtYytvS5Aku1YLYxdkUoDj9JU01tuMsTp:iwhtvSLuleUoPo0uM
TLSH
T1C0B4CF21B690C033E51312754879A77A992FAA715B3095C797EC0E7EBF663C39B3034A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

100626

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

E:\PCProjects\Pakages\Pakage1.0\AICONExe\Release\AICONExe.pdb

user32

GetSystemMetrics PostMessageW

advapi32

RegOpenKeyW RegCloseKey RegEnumValueA RegOpenKeyExA

shell32

ShellExecuteA

ws2_32

getsockopt socket gethostbyname closesocket __WSAFDIsSet recv htons select WSAStartup connect inet_ntoa send

netapi32

Netbios

kernel32

CompareStringW SetEnvironmentVariableA GetModuleHandleW WriteConsoleW HeapReAlloc GetStringTypeW IsValidLocale EnumSystemLocalesA GetLocaleInfoA GetUserDefaultLCID GetLocaleInfoW FlushFileBuffers GetConsoleMode GetConsoleCP SetStdHandle GetTimeZoneInformation IsValidCodePage GetOEMCP GetACP HeapSize IsProcessorFeaturePresent IsDebuggerPresent UnhandledExceptionFilter GetCurrentProcessId InitializeCriticalSection LeaveCriticalSection EnterCriticalSection DeleteCriticalSection SetFilePointer WriteFile ReadFile CreateFileW GetLastError CloseHandle Sleep CreateThread GetCommandLineA CreateMutexW WaitForSingleObject ReleaseMutex FindResourceA FreeLibrary LoadResource UpdateResourceA EndUpdateResourceW EnumResourceTypesA SizeofResource EnumResourceLanguagesA SetLastError BeginUpdateResourceW LoadLibraryA LockResource BeginUpdateResourceA UpdateResourceW EnumResourceNamesA EndUpdateResourceA WideCharToMultiByte MultiByteToWideChar GetCurrentProcess LoadLibraryW GetVersionExW GetFileAttributesA TerminateProcess GetProcAddress GetSystemInfo InterlockedIncrement InterlockedDecrement EncodePointer DecodePointer InterlockedExchange GetCommandLineW HeapSetInformation GetSystemTimeAsFileTime HeapFree HeapAlloc RaiseException RtlUnwind LCMapStringW GetCPInfo SetUnhandledExceptionFilter ExitProcess GetStdHandle GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType GetStartupInfoW TlsAlloc TlsGetValue TlsSetValue TlsFree GetCurrentThreadId HeapCreate QueryPerformanceCounter GetTickCount

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-10_ed7f46b0eee5963d82dad0b45d0cf694_amadey_coinminer_elex_kwampirs_mafia_smoke-loader

user32

advapi32

shell32

ws2_32

netapi32

kernel32

generic