General
- Target 2026-08-20_1eadecfa1f8e8db395f2686d953ee662_amadey_coinminer_elex_kwampirs_mafia_smoke-loader
- Size 293KB
- Sample260820-tcb2fazhpb
- SHA256 ecc104af1545496b475ffff9ab37ed4808193d8bb9513c7802670b964c0918d9
- MD5 1eadecfa1f8e8db395f2686d953ee662
- SHA1 f87cd345a356c3e140bf5ef3a58dcaa12658a39e
- SHA512 068726c40d28ce747e0bca3ab9d2cc14ec7423a86047919416a54a2e2fc6e88ee80b4a7b01fffb3fd36df1d573bd607265f435a4e48ee96c275c545c16be0eb0
- SSDEEP 6144:YNgF4DxNuJc06j4YBa77xMQxA5i5knmv1SL/mQX+elPEYrnqSt:Yu4lNAtYytvS5Aku1YL+cprnqS
- TLSH T16F547D20B690C072F51B1D71897997BA8B3FA9354B3050C7A7DC1E399F662D39B3071A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-20_1eadecfa1f8e8db395f2686d953ee662_amadey_coinminer_elex_kwampirs_mafia_smoke-loader.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_1eadecfa1f8e8db395f2686d953ee662_amadey_coinminer_elex_kwampirs_mafia_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_1eadecfa1f8e8db395f2686d953ee662_amadey_coinminer_elex_kwampirs_mafia_smoke-loader
- Size 293KB
- SHA256 ecc104af1545496b475ffff9ab37ed4808193d8bb9513c7802670b964c0918d9
- MD5 1eadecfa1f8e8db395f2686d953ee662
- SHA1 f87cd345a356c3e140bf5ef3a58dcaa12658a39e
- SHA512 068726c40d28ce747e0bca3ab9d2cc14ec7423a86047919416a54a2e2fc6e88ee80b4a7b01fffb3fd36df1d573bd607265f435a4e48ee96c275c545c16be0eb0
- SSDEEP 6144:YNgF4DxNuJc06j4YBa77xMQxA5i5knmv1SL/mQX+elPEYrnqSt:Yu4lNAtYytvS5Aku1YL+cprnqS
- TLSH T16F547D20B690C072F51B1D71897997BA8B3FA9354B3050C7A7DC1E399F662D39B3071A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL