2026-09-29_cadef534a07c383ecd730d10a0c21c6f_amadey_coinminer_elex_maze_smoke-loader_stealc

General

Target
2026-09-29_cadef534a07c383ecd730d10a0c21c6f_amadey_coinminer_elex_maze_smoke-loader_stealc
Size 1.2MB
Sample260930-t3k22adb22
SHA256 59f8ca328a4690a812a84fa91d0df48090e9d42051fc983b689a9361e3497490
MD5 cadef534a07c383ecd730d10a0c21c6f
SHA1 c7b141232e1595cbe656227970e76d629dba0cf9
SHA512 0a120ca7782be2197f4f8cc2d6d6f65c08475bd7b5fd0067995a237b13e00ca775e087c564742e706c184341f0ea57b2b7153503c4ab63624783e210f042a390
SSDEEP 24576:uII2mRVMuLi/mDnICLJ4gxqBeO7/ATDNoo3cK0Ef2gsOA8NI:xmRV247qBeO7/ATDNo2+Ef2gsO7I
TLSH
T161456B04FB43D2BDCE6201B02667FB1A50B879859B296ED3D7D43F0A0531AC2BA3B55D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-29_cadef534a07c383ecd730d10a0c21c6f_amadey_coinminer_elex_maze_smoke-loader_stealc

File Explorer

2026-09-29_cadef534a07c383ecd730d10a0c21c6f_amadey_coinminer_elex_maze_smoke-loader_stealc

.exe 1.2MB

2026-09-29_cadef534a07c383ecd730d10a0c21c6f_amadey_coinminer_elex_maze_smoke-loader_stealc

IMPHASH c6e8bd2e433bc48b6b25f594a9b816b5
SHA256 59f8ca328a4690a812a84fa91d0df48090e9d42051fc983b689a9361e3497490
MD5 cadef534a07c383ecd730d10a0c21c6f
SHA1 c7b141232e1595cbe656227970e76d629dba0cf9
SHA512 0a120ca7782be2197f4f8cc2d6d6f65c08475bd7b5fd0067995a237b13e00ca775e087c564742e706c184341f0ea57b2b7153503c4ab63624783e210f042a390
SSDEEP 24576:uII2mRVMuLi/mDnICLJ4gxqBeO7/ATDNoo3cK0Ef2gsOA8NI:xmRV247qBeO7/ATDNo2+Ef2gsO7I
TLSH
T161456B04FB43D2BDCE6201B02667FB1A50B879859B296ED3D7D43F0A0531AC2BA3B55D
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

727587

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

F:\Codes\CommonPlatform\Helper2345\bin\Win32\Release\pdb\Helper_2345.pdb

kernel32

LoadLibraryW GetModuleFileNameW GetProcAddress LocalFree CreateProcessW lstrcmpiW CloseHandle GetCurrentProcessId FindFirstFileW FileTimeToSystemTime FindClose GetModuleHandleW GetFileAttributesW ExpandEnvironmentStringsW CreateMutexW WaitForSingleObject Sleep GetLastError ReleaseMutex CreateFileW GetLongPathNameW GetFileAttributesExW HeapAlloc HeapFree GetProcessHeap OpenProcess GetVersionExW GetComputerNameExW GetCurrentThreadId GetCurrentProcess QueryDosDeviceW GetFileSize SetFilePointer SetEndOfFile SetFileTime WriteFile ReadFile GetFileTime WideCharToMultiByte GetACP MultiByteToWideChar FindNextFileW FreeLibrary FindResourceW LoadResource LockResource GetSystemInfo DeleteFileW InitializeCriticalSection LeaveCriticalSection EnterCriticalSection DeleteCriticalSection lstrlenW GetFileSizeEx GetFullPathNameW GetTempFileNameW MoveFileExW CreateDirectoryW GetTempPathW GetCurrentDirectoryW MoveFileW RemoveDirectoryW GetWindowsDirectoryW SetFileAttributesW GetLogicalDriveStringsW SetEnvironmentVariableA GetEnvironmentVariableW SetEvent GetTickCount WaitForMultipleObjects GetExitCodeProcess FormatMessageW GlobalMemoryStatusEx LoadLibraryExW InitializeCriticalSectionAndSpinCount ResumeThread ResetEvent CreateEventW RaiseException DecodePointer InterlockedExchangeAdd InterlockedExchange SetLastError DeviceIoControl FlushFileBuffers OutputDebugStringW GetCommandLineW SetStdHandle WriteConsoleW ReadConsoleW SetFilePointerEx GetConsoleMode GetConsoleCP HeapReAlloc GetTimeZoneInformation GetOEMCP IsValidCodePage FreeEnvironmentStringsW EncodePointer GetStringTypeW IsDebuggerPresent IsProcessorFeaturePresent GetSystemTimeAsFileTime CreateThread ExitThread RtlUnwind GetCPInfo UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetStartupInfoW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW ExitProcess GetModuleHandleExW HeapSize GetStdHandle GetFileType QueryPerformanceCounter GetEnvironmentStringsW

shell32

SHGetSpecialFolderPathW SHGetFolderPathW CommandLineToArgvW

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-29_cadef534a07c383ecd730d10a0c21c6f_amadey_coinminer_elex_maze_smoke-loader_stealc

kernel32

shell32

generic