General
- Target 2026-07-01_43b5567c0c18f899101e989178105076_amadey_coinminer_elex_smoke-loader_stop
- Size 766KB
- Sample260701-x9rpyafs8z
- SHA256 ea2721f8ad3469863e1701aa6a39062fdff6f51e13343e02233fe0ee0dd59170
- MD5 43b5567c0c18f899101e989178105076
- SHA1 c5a70967ffd7ac9467259c1947ddb952c01f4ecd
- SHA512 78a0a13de8b47e17b0726e112f5b0c64a4d1c661abf515c32c77c6bbaf94594c5bc6cfae5b2b995bb99d93ba4df3f8df632e1822fff4cf8c1bb3a01837d42f33
- SSDEEP 12288:iSvO2x9mONvKRwLSFtsOkx2LIa+ya5FAQjU/Liw:pvO2xJKRw2kOkx2LFRvcUV
- TLSH T1F4F45A31E241C03AD0A74576C6FA0BAFE564BD25531155CBA3C43A6A2FB36D2BE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-01_43b5567c0c18f899101e989178105076_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_43b5567c0c18f899101e989178105076_amadey_coinminer_elex_smoke-loader_stop
- Size 766KB
- SHA256 ea2721f8ad3469863e1701aa6a39062fdff6f51e13343e02233fe0ee0dd59170
- MD5 43b5567c0c18f899101e989178105076
- SHA1 c5a70967ffd7ac9467259c1947ddb952c01f4ecd
- SHA512 78a0a13de8b47e17b0726e112f5b0c64a4d1c661abf515c32c77c6bbaf94594c5bc6cfae5b2b995bb99d93ba4df3f8df632e1822fff4cf8c1bb3a01837d42f33
- SSDEEP 12288:iSvO2x9mONvKRwLSFtsOkx2LIa+ya5FAQjU/Liw:pvO2xJKRw2kOkx2LFRvcUV
- TLSH T1F4F45A31E241C03AD0A74576C6FA0BAFE564BD25531155CBA3C43A6A2FB36D2BE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory