General
- Target 2026-07-01_acf77615a71948447f5a0a2d6d61865c_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- Sample260701-xb55nset2s
- SHA256 63d5989a136041e386e14aa4cb11600e9333b5375759bc4788bd8c340ed65700
- MD5 acf77615a71948447f5a0a2d6d61865c
- SHA1 85a8bf0ff66a36483bc882d377df40add16177f6
- SHA512 54748ca823ae0bb75ec14a105b0032147b019ced02717ee8f2fd3b66fc5d492c24d2fa46408b590efb53d6da4f31a3adb251b6d2531ddb1e7945d7a14a12cccd
- SSDEEP 6144:C4ZaN1cb90oOTFmIFLq0cvnXhLCqj2EFNirGcEOkCybEaQRuy8K:CrNOb9+sIF+0cvnXhLCqEsOkxHy
- TLSH T174C48D29B6E0C076C4B79578C4A186B6FAB17832372459CFA394075A1F337E2BA3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-01_acf77615a71948447f5a0a2d6d61865c_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_acf77615a71948447f5a0a2d6d61865c_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- SHA256 63d5989a136041e386e14aa4cb11600e9333b5375759bc4788bd8c340ed65700
- MD5 acf77615a71948447f5a0a2d6d61865c
- SHA1 85a8bf0ff66a36483bc882d377df40add16177f6
- SHA512 54748ca823ae0bb75ec14a105b0032147b019ced02717ee8f2fd3b66fc5d492c24d2fa46408b590efb53d6da4f31a3adb251b6d2531ddb1e7945d7a14a12cccd
- SSDEEP 6144:C4ZaN1cb90oOTFmIFLq0cvnXhLCqj2EFNirGcEOkCybEaQRuy8K:CrNOb9+sIF+0cvnXhLCqEsOkxHy
- TLSH T174C48D29B6E0C076C4B79578C4A186B6FAB17832372459CFA394075A1F337E2BA3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory