Extracted

• • Target
    2026-08-24_62294f9821b76ad435f883ba5416ce40_coinminer_elex_smoke-loader_stealc
  • Size 622KB
  • SHA256 a1694974d547ef4770c3e289a38204e3f093e5e069a72acab1370b5bd3597fac
  • MD5 62294f9821b76ad435f883ba5416ce40
  • SHA1 dd294376b06aac8f5e73e0daaf3f69c2407957ad
  • SHA512 efd96277d0c4198ea67f71f0cb88507748e9682da32b0ddb2896fba985688ac13cdd45298e3db5dc0d3850611920312e5f81a8d4108e7d778e9757998d2d94d9
  • SSDEEP 12288:Su/WqK90SG6I/RBNvblgCydbVNJw3QrWVP03aMDzDGy31hoo3C6pbbXLhwsC:Su/WqBQJwAmMxzGghoo3Cubdw9
  • TLSH
    T1AED48D16A643E0B2D4B936B15C7783764EF76935432A92C3D7D2CD215A012F8EA3E36C
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  backdoordefense_evasiondiscoverysalitytrojanupx

  • Family: Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • Modifies firewall policy service

    defense_evasion

  • UAC bypass

    defense_evasiontrojan

  • Windows security bypass

    defense_evasiontrojan

  • Detects executables packed with Sality Polymorphic Code Generator or Simple Poly Engine or Sality

  • UPX dump on OEP (original entry point)

  • Windows security modification

    defense_evasiontrojan

  • Checks whether UAC is enabled

    defense_evasiontrojan

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2