2026-09-25_a8e846d598e7af27ea7d583cdd9d6ca9_amadey_coinminer_elex_maze_smoke-loader_stealc

General

Target
2026-09-25_a8e846d598e7af27ea7d583cdd9d6ca9_amadey_coinminer_elex_maze_smoke-loader_stealc
Size 1.2MB
Sample260925-1e3eqsxcqa
SHA256 56c8ec0eeae6a0167656d6869be607e778c2673fc06362be29f4b06fda54927e
MD5 a8e846d598e7af27ea7d583cdd9d6ca9
SHA1 4e1b13a93e7590c6bc3a3bf8fff0fc9c14266163
SHA512 776abde7946683681022d395828e9593d4575b04a7397deda2bfcc9a0138b94aee64a6fba45b78e3728aa68bb19a7fc29e5e41cc29a5ac05e96c6770c6a1faf8
SSDEEP 24576:5II2mRVMuLi/mDnICLJ4gxqBe97/ATDNoo3cK0Ef2gsOdCYL:cmRV247qBe97/ATDNo2+Ef2gsOdCYL
TLSH
T1E5456C04FB43D2B9CE6301B02667FB1A507879859B296ED3D7D83F0A0531AC2BA3B55D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-25_a8e846d598e7af27ea7d583cdd9d6ca9_amadey_coinminer_elex_maze_smoke-loader_stealc

File Explorer

2026-09-25_a8e846d598e7af27ea7d583cdd9d6ca9_amadey_coinminer_elex_maze_smoke-loader_stealc

.exe 1.2MB

2026-09-25_a8e846d598e7af27ea7d583cdd9d6ca9_amadey_coinminer_elex_maze_smoke-loader_stealc

IMPHASH c6e8bd2e433bc48b6b25f594a9b816b5
SHA256 56c8ec0eeae6a0167656d6869be607e778c2673fc06362be29f4b06fda54927e
MD5 a8e846d598e7af27ea7d583cdd9d6ca9
SHA1 4e1b13a93e7590c6bc3a3bf8fff0fc9c14266163
SHA512 776abde7946683681022d395828e9593d4575b04a7397deda2bfcc9a0138b94aee64a6fba45b78e3728aa68bb19a7fc29e5e41cc29a5ac05e96c6770c6a1faf8
SSDEEP 24576:5II2mRVMuLi/mDnICLJ4gxqBe97/ATDNoo3cK0Ef2gsOdCYL:cmRV247qBe97/ATDNo2+Ef2gsOdCYL
TLSH
T1E5456C04FB43D2B9CE6301B02667FB1A507879859B296ED3D7D83F0A0531AC2BA3B55D
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

727587

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

F:\Codes\CommonPlatform\Helper2345\bin\Win32\Release\pdb\Helper_2345.pdb

kernel32

LoadLibraryW GetModuleFileNameW GetProcAddress LocalFree CreateProcessW lstrcmpiW CloseHandle GetCurrentProcessId FindFirstFileW FileTimeToSystemTime FindClose GetModuleHandleW GetFileAttributesW ExpandEnvironmentStringsW CreateMutexW WaitForSingleObject Sleep GetLastError ReleaseMutex CreateFileW GetLongPathNameW GetFileAttributesExW HeapAlloc HeapFree GetProcessHeap OpenProcess GetVersionExW GetComputerNameExW GetCurrentThreadId GetCurrentProcess QueryDosDeviceW GetFileSize SetFilePointer SetEndOfFile SetFileTime WriteFile ReadFile GetFileTime WideCharToMultiByte GetACP MultiByteToWideChar FindNextFileW FreeLibrary FindResourceW LoadResource LockResource GetSystemInfo DeleteFileW InitializeCriticalSection LeaveCriticalSection EnterCriticalSection DeleteCriticalSection lstrlenW GetFileSizeEx GetFullPathNameW GetTempFileNameW MoveFileExW CreateDirectoryW GetTempPathW GetCurrentDirectoryW MoveFileW RemoveDirectoryW GetWindowsDirectoryW SetFileAttributesW GetLogicalDriveStringsW SetEnvironmentVariableA GetEnvironmentVariableW SetEvent GetTickCount WaitForMultipleObjects GetExitCodeProcess FormatMessageW GlobalMemoryStatusEx LoadLibraryExW InitializeCriticalSectionAndSpinCount ResumeThread ResetEvent CreateEventW RaiseException DecodePointer InterlockedExchangeAdd InterlockedExchange SetLastError DeviceIoControl FlushFileBuffers OutputDebugStringW GetCommandLineW SetStdHandle WriteConsoleW ReadConsoleW SetFilePointerEx GetConsoleMode GetConsoleCP HeapReAlloc GetTimeZoneInformation GetOEMCP IsValidCodePage FreeEnvironmentStringsW EncodePointer GetStringTypeW IsDebuggerPresent IsProcessorFeaturePresent GetSystemTimeAsFileTime CreateThread ExitThread RtlUnwind GetCPInfo UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetStartupInfoW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW ExitProcess GetModuleHandleExW HeapSize GetStdHandle GetFileType QueryPerformanceCounter GetEnvironmentStringsW

shell32

SHGetSpecialFolderPathW SHGetFolderPathW CommandLineToArgvW

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-25_a8e846d598e7af27ea7d583cdd9d6ca9_amadey_coinminer_elex_maze_smoke-loader_stealc

kernel32

shell32

generic