2026-08-20_1eadecfa1f8e8db395f2686d953ee662_amadey_coinminer_elex_kwampirs_mafia_smoke-loader

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-20_1eadecfa1f8e8db395f2686d953ee662_amadey_coinminer_elex_kwampirs_mafia_smoke-loader
Size 293KB
Sample260820-tcb2fazhpb
SHA256 ecc104af1545496b475ffff9ab37ed4808193d8bb9513c7802670b964c0918d9
MD5 1eadecfa1f8e8db395f2686d953ee662
SHA1 f87cd345a356c3e140bf5ef3a58dcaa12658a39e
SHA512 068726c40d28ce747e0bca3ab9d2cc14ec7423a86047919416a54a2e2fc6e88ee80b4a7b01fffb3fd36df1d573bd607265f435a4e48ee96c275c545c16be0eb0
SSDEEP 6144:YNgF4DxNuJc06j4YBa77xMQxA5i5knmv1SL/mQX+elPEYrnqSt:Yu4lNAtYytvS5Aku1YL+cprnqS
TLSH
T16F547D20B690C072F51B1D71897997BA8B3FA9354B3050C7A7DC1E399F662D39B3071A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-20_1eadecfa1f8e8db395f2686d953ee662_amadey_coinminer_elex_kwampirs_mafia_smoke-loader

File Explorer

2026-08-20_1eadecfa1f8e8db395f2686d953ee662_amadey_coinminer_elex_kwampirs_mafia_smoke-loader

.exe 293KB

2026-08-20_1eadecfa1f8e8db395f2686d953ee662_amadey_coinminer_elex_kwampirs_mafia_smoke-loader

IMPHASH 1c987a054a75dee2dd9dc04e22456d2f
SHA256 ecc104af1545496b475ffff9ab37ed4808193d8bb9513c7802670b964c0918d9
MD5 1eadecfa1f8e8db395f2686d953ee662
SHA1 f87cd345a356c3e140bf5ef3a58dcaa12658a39e
SHA512 068726c40d28ce747e0bca3ab9d2cc14ec7423a86047919416a54a2e2fc6e88ee80b4a7b01fffb3fd36df1d573bd607265f435a4e48ee96c275c545c16be0eb0
SSDEEP 6144:YNgF4DxNuJc06j4YBa77xMQxA5i5knmv1SL/mQX+elPEYrnqSt:Yu4lNAtYytvS5Aku1YL+cprnqS
TLSH
T16F547D20B690C072F51B1D71897997BA8B3FA9354B3050C7A7DC1E399F662D39B3071A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

100626

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

E:\PCProjects\Pakages\Pakage1.0\AICONExe\Release\AICONExe.pdb

user32

GetSystemMetrics PostMessageW

advapi32

RegOpenKeyW RegCloseKey RegEnumValueA RegOpenKeyExA

shell32

ShellExecuteA

ws2_32

getsockopt socket gethostbyname closesocket __WSAFDIsSet recv htons select WSAStartup connect inet_ntoa send

netapi32

Netbios

kernel32

CompareStringW SetEnvironmentVariableA GetModuleHandleW WriteConsoleW HeapReAlloc GetStringTypeW IsValidLocale EnumSystemLocalesA GetLocaleInfoA GetUserDefaultLCID GetLocaleInfoW FlushFileBuffers GetConsoleMode GetConsoleCP SetStdHandle GetTimeZoneInformation IsValidCodePage GetOEMCP GetACP HeapSize IsProcessorFeaturePresent IsDebuggerPresent UnhandledExceptionFilter GetCurrentProcessId InitializeCriticalSection LeaveCriticalSection EnterCriticalSection DeleteCriticalSection SetFilePointer WriteFile ReadFile CreateFileW GetLastError CloseHandle Sleep CreateThread GetCommandLineA CreateMutexW WaitForSingleObject ReleaseMutex FindResourceA FreeLibrary LoadResource UpdateResourceA EndUpdateResourceW EnumResourceTypesA SizeofResource EnumResourceLanguagesA SetLastError BeginUpdateResourceW LoadLibraryA LockResource BeginUpdateResourceA UpdateResourceW EnumResourceNamesA EndUpdateResourceA WideCharToMultiByte MultiByteToWideChar GetCurrentProcess LoadLibraryW GetVersionExW GetFileAttributesA TerminateProcess GetProcAddress GetSystemInfo InterlockedIncrement InterlockedDecrement EncodePointer DecodePointer InterlockedExchange GetCommandLineW HeapSetInformation GetSystemTimeAsFileTime HeapFree HeapAlloc RaiseException RtlUnwind LCMapStringW GetCPInfo SetUnhandledExceptionFilter ExitProcess GetStdHandle GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType GetStartupInfoW TlsAlloc TlsGetValue TlsSetValue TlsFree GetCurrentThreadId HeapCreate QueryPerformanceCounter GetTickCount

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-20_1eadecfa1f8e8db395f2686d953ee662_amadey_coinminer_elex_kwampirs_mafia_smoke-loader

user32

advapi32

shell32

ws2_32

netapi32

kernel32

generic