2026-11-03_39fdf786b88ac13dc23469efb2e50e7f_coinminer_elex_maze_rhadamanthys_smoke-loader

General

Target
2026-11-03_39fdf786b88ac13dc23469efb2e50e7f_coinminer_elex_maze_rhadamanthys_smoke-loader
Size 2.0MB
Sample261104-3gcyzagv2n
SHA256 fb26faf61169e975e1b7f862997247f321dfebc7bf18d3298ddd617c7d8f5e34
MD5 39fdf786b88ac13dc23469efb2e50e7f
SHA1 3c7953e9a67a9cb00bdba506c3b2f61ed47f75ca
SHA512 7d72280d41a257641d7e4b7e89fbd233aaa309ff100d06952aba667097557bad38db7235a827d3f2ae1e8121485a9dd0bb3df291273ea662a3965e4924e8d0f2
SSDEEP 24576:uWvWL0vbzoJdXN0BN2qnw4a+edxoBrLdgguWWh4f1tLeyWcRq4a:hA0vbzoJdXN0BMOwLloBruguWWhipXq
TLSH
T17C959E1677E48475E0B38274896A9316E572FC305B71CACF6280A62D5FB36C28D36B37
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-11-03_39fdf786b88ac13dc23469efb2e50e7f_coinminer_elex_maze_rhadamanthys_smoke-loader

File Explorer

2026-11-03_39fdf786b88ac13dc23469efb2e50e7f_coinminer_elex_maze_rhadamanthys_smoke-loader

.exe 2.0MB

2026-11-03_39fdf786b88ac13dc23469efb2e50e7f_coinminer_elex_maze_rhadamanthys_smoke-loader

IMPHASH 75e7fb7458b2e2dd8c3b4d1f0020fc10
SHA256 fb26faf61169e975e1b7f862997247f321dfebc7bf18d3298ddd617c7d8f5e34
MD5 39fdf786b88ac13dc23469efb2e50e7f
SHA1 3c7953e9a67a9cb00bdba506c3b2f61ed47f75ca
SHA512 7d72280d41a257641d7e4b7e89fbd233aaa309ff100d06952aba667097557bad38db7235a827d3f2ae1e8121485a9dd0bb3df291273ea662a3965e4924e8d0f2
SSDEEP 24576:uWvWL0vbzoJdXN0BN2qnw4a+edxoBrLdgguWWh4f1tLeyWcRq4a:hA0vbzoJdXN0BMOwLloBruguWWhipXq
TLSH
T17C959E1677E48475E0B38274896A9316E572FC305B71CACF6280A62D5FB36C28D36B37
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

9451

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

c:\builds\moz2_slave\rel-m-rel-w32_bld-000000000000\build\obj-firefox\browser\app\firefox.pdb

kernel32

GetEnvironmentVariableW GetProcessIoCounters FreeLibrary SetDllDirectoryW VerSetConditionMask GetCurrentProcess SetEnvironmentVariableW GetModuleHandleW WideCharToMultiByte LoadLibraryW GetFileAttributesW VerifyVersionInfoA GetModuleFileNameW MultiByteToWideChar FlushInstructionCache GetProcAddress VirtualProtectEx VirtualAllocEx GetModuleHandleA LoadLibraryExA ExpandEnvironmentStringsW LoadLibraryExW SetFilePointerEx ReadFile CreateFileW CloseHandle IsDebuggerPresent RaiseException GetLastError GetCommandLineW EncodePointer DecodePointer IsProcessorFeaturePresent EnterCriticalSection LeaveCriticalSection SetLastError GetCurrentThreadId ExitProcess GetModuleHandleExW GetProcessHeap GetStdHandle GetFileType DeleteCriticalSection GetStartupInfoW WriteFile QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW IsValidCodePage GetACP GetOEMCP GetCPInfo HeapSize RtlUnwind HeapFree UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree HeapAlloc SetStdHandle OutputDebugStringW GetStringTypeW CompareStringW LCMapStringW GetConsoleCP GetConsoleMode HeapReAlloc SetEnvironmentVariableA ReadConsoleW FlushFileBuffers WriteConsoleW SetEndOfFile

Sharing

General

Malware Config

Signatures

File Explorer

2026-11-03_39fdf786b88ac13dc23469efb2e50e7f_coinminer_elex_maze_rhadamanthys_smoke-loader

kernel32

generic