Hostile 92% Download

2026-09-16_2d4528a98f0720674d60d0c4837a41c9_amadey_coinminer_elex_floxif_smoke-loader_stop_vidar

Known malware family, embedded PE

Detects Windows.Virus.FloxifEmbedded PE binary at file offset 0x1fe600 (~1605632 bytes)
SHA-2569ff6349f5578528df103e33901f0316dd096f8a01d272cc28e645cfc87391c18
URLhttps://tria.ge/api/v0/samples/260916-2yzcvstycv/sample
MaleculeMdTh

Evidence

Detects Windows.Virus.Floxif 0xa0752–0xa08d2
⋯7 more rows
0xa07c2508b44240483c004508b442404c20800P.D$....P.D$....
0xa07d28b542404807a030175048d4204c38d42.T$..z..u..B...B
0xa07e204538bc88a5a0284db740230198a19f6.S...Z...t.0....
⋯15 more rows
Percent-encoded content decoded 0x118870–0x118940
⋯3 more rows
0x1188a04e7451756572794b6579000000000000NtQueryKey......
0x1188b0250064003e0020005b00250064005d00%.d.>. .[.%.d.].
0x1188c02000280025003000320064002d002500 .(.%.0.2.d.-.%.
0x1188d0300032006400200025003000320064000.2.d. .%.0.2.d.
⋯7 more rows
Encoded content decoded: hex → base64 0x1986c9–0x198799
⋯3 more rows
0x1986f902020202020202020202020202161616................
0x198709373737373737373737373737373737377777777777777777
0x198719373737373737373737373737373737377777777777777777
0x198729373737373737373737373737373737377777777777777777
⋯7 more rows
Embedded PE binary at file offset 0x1fe600 (~1605632 bytes) 0x1fe5c0–0x1fe690
⋯3 more rows
0x1fe5f0494e47585850414444494e4750414444INGXXPADDINGPADD
0x1fe6004d5a90000300000004000000ffff0000MZ..............
0x1fe610b8000000000000004000000000000000........@.......
0x1fe62000000000000000000000000000000000................
⋯7 more rows
Detects Windows.Virus.Floxif 0xa0752–0xa08d2
⋯7 more rows
0xa07c2508b44240483c004508b442404c20800P.D$....P.D$....
0xa07d28b542404807a030175048d4204c38d42.T$..z..u..B...B
0xa07e204538bc88a5a0284db740230198a19f6.S...Z...t.0....
⋯15 more rows
Percent-encoded content decoded 0x118870–0x118940
⋯3 more rows
0x1188a04e7451756572794b6579000000000000NtQueryKey......
0x1188b0250064003e0020005b00250064005d00%.d.>. .[.%.d.].
0x1188c02000280025003000320064002d002500 .(.%.0.2.d.-.%.
0x1188d0300032006400200025003000320064000.2.d. .%.0.2.d.
⋯7 more rows
Encoded content decoded: hex → base64 0x1986c9–0x198799
⋯3 more rows
0x1986f902020202020202020202020202161616................
0x198709373737373737373737373737373737377777777777777777
0x198719373737373737373737373737373737377777777777777777
0x198729373737373737373737373737373737377777777777777777
⋯7 more rows
Embedded PE binary at file offset 0x1fe600 (~1605632 bytes) 0x1fe5c0–0x1fe690
⋯3 more rows
0x1fe5f0494e47585850414444494e4750414444INGXXPADDINGPADD
0x1fe6004d5a90000300000004000000ffff0000MZ..............
0x1fe610b8000000000000004000000000000000........@.......
0x1fe62000000000000000000000000000000000................
⋯7 more rows

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.