2026-10-18_ff14a19e5819f63459040fae7306aee3_amadey_coinminer_elex_maze_smoke-loader_stealc
Classification: Malicious
2026-10-18_ff14a19e5819f63459040fae7306aee3_amadey_coinminer_elex_maze_smoke-loader_stealc is a virus. Detected by 59 antivirus engines.
Detection summary
- 59 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
Blacklist sightings
| Description |
Source |
First seen |
Last seen |
Labels |
MITRE ATT&CK |
| Sality |
Triage |
2026-10-18 05:20:42 |
2026-10-18 05:20:42 |
malicious-activity
|
|
Tags
sality
backdoor
defense_evasion
discovery
trojan
upx
Sample information
- Filenames
- 2026-10-18_ff14a19e5819f63459040fae7306aee3_amadey_coinminer_elex_maze_smoke-loader_stealc
- SHA-256
c977cb04ef3e555defe9f47edf9710f96d9f8880df2e91a2839a14e6a428b008- First indexed
- 2026-10-18 05:20:42
- Last updated
- 2026-10-18 05:20:42
Antivirus detections
| Engine | Detection |
|---|
| APEX | Malicious |
| AVG | Win32:Sality [Inf] |
| Acronis | suspicious |
| AhnLab-V3 | Win32/Kashu.E |
| Antiy-AVL | GrayWare[AdWare]/Win32.Ad2345 |
| Arcabit | Win32.Sality.3 |
| Avast | Win32:Sality [Inf] |
| Avira | W32/Sality.AT |
| BitDefender | Win32.Sality.3 |
| Bkav | W32.Sality.PE |
| CAT-QuickHeal | W32.Sality.U |
| CTX | exe.unknown.sality |
| ClamAV | Win.Dropper.Remcos-10042514-0 |
| CrowdStrike | win/malicious_confidence_100% (D) |
| Cylance | Unsafe |
| Cynet | Malicious (score: 100) |
| DeepInstinct | MALICIOUS |
| DrWeb | Win32.Sector.30 |
| ESET-NOD32 | Win32/Sality.NBA virus |
| Elastic | malicious (high confidence) |
| Emsisoft | Win32.Sality.3 (B) |
| F-Secure | Malware.W32/Sality.AT |
| Fortinet | W32/Sality.AT!dam |
| GData | Win32.Sality.3 |
| Google | Detected |
| Ikarus | Virus.Win32.Sality |
| Jiangmin | Win32/HLLP.Kuku.poly2 |
| K7AntiVirus | Riskware ( 0057243a1 ) |
| K7GW | Riskware ( 0057243a1 ) |
| Kaspersky | Virus.Win32.Sality.sil |
| MaxSecure | Virus.Sality.BH |
| McAfeeD | Real Protect-LS!FF14A19E5819 |
| MicroWorld-eScan | Win32.Sality.3 |
| Microsoft | Virus:Win32/Sality.AT |
| NANO-Antivirus | Virus.Win32.Sality.bzkem |
| Panda | W32/Sality.AA |
| Rising | Virus.Sality!1.A5BD (CLASSIC) |
| SUPERAntiSpyware | PUP.Bundler/Variant |
| Sangfor | Virus.Win32.Save.a |
| SentinelOne | Static AI - Malicious PE |
| Skyhigh | BehavesLike.Win32.Infected.th |
| Sophos | Mal/Sality-E |
| Symantec | W32.Sality.AE |
| TACHYON | Virus/W32.Sality.D |
| Tencent | Virus.Win32.TuTu.Gen.200004 |
| Trapmine | malicious.moderate.ml.score |
| TrellixENS | W32/Sality.gen.z |
| TrendMicro | PE_SALITY.ER |
| TrendMicro-HouseCall | PE_SALITY.ER |
| VBA32 | Virus.Win32.Sality.bakb |
| VIPRE | Win32.Sality.3 |
| Varist | W32/Sality.AY.gen!Eldorado |
| ViRobot | Win32.Sality.Gen.A |
| VirIT | Win32.Sality.BI |
| Yandex | Win32.Sality.FA.Gen |
| Zillya | Virus.Sality.Win32.25 |
| ZoneAlarm | Mal/Sality-D |
| alibabacloud | Virus:Win/Sality.NBA(dyn) |
| huorong | Adware/HelperHaoZip.a |