General
- Target 2026-08-16_df5d7f1be47dff8de29a2c0960e8c429_amadey_coinminer_elex_smoke-loader
- Size 1.2MB
- Sample260816-yp8cmawejd
- SHA256 479dc48b2cc50027ecd41c9ef12aed8c4c40ac575b9fb756ac39b868d172ae3c
- MD5 df5d7f1be47dff8de29a2c0960e8c429
- SHA1 5ac3e11f38be687cfcf3c953e8f6ad904448c00a
- SHA512 2bf3494233053ce8149db5199ac5e3403aa726fb521856b1a6a0ee8969c78fb8ed4c8ce1afcb290c60a7ae4a1529e8e182f43dc7920e59cd8dbc66720530e411
- SSDEEP 24576:vj4RTQ3QvaFYlQqPbjH7Ano3FkZBOkUhMXcBwc04nA:b2CKl/j4o3aUasqc
- TLSH T10B45BF657574CDDFC0E70D73FB978EA02E29A5382E1081179258AF2D2C740B96E7A372
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-16_df5d7f1be47dff8de29a2c0960e8c429_amadey_coinminer_elex_smoke-loader.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-16_df5d7f1be47dff8de29a2c0960e8c429_amadey_coinminer_elex_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_df5d7f1be47dff8de29a2c0960e8c429_amadey_coinminer_elex_smoke-loader
- Size 1.2MB
- SHA256 479dc48b2cc50027ecd41c9ef12aed8c4c40ac575b9fb756ac39b868d172ae3c
- MD5 df5d7f1be47dff8de29a2c0960e8c429
- SHA1 5ac3e11f38be687cfcf3c953e8f6ad904448c00a
- SHA512 2bf3494233053ce8149db5199ac5e3403aa726fb521856b1a6a0ee8969c78fb8ed4c8ce1afcb290c60a7ae4a1529e8e182f43dc7920e59cd8dbc66720530e411
- SSDEEP 24576:vj4RTQ3QvaFYlQqPbjH7Ano3FkZBOkUhMXcBwc04nA:b2CKl/j4o3aUasqc
- TLSH T10B45BF657574CDDFC0E70D73FB978EA02E29A5382E1081179258AF2D2C740B96E7A372
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.