General
- Target 2026-07-02_c33c1b1b29bfc6f6acf36c84b3c6e47b_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- Sample260702-2f5f6afy3x
- SHA256 441814c3a86e59feaa77d8a7867c1dca958f333bd3b38e8309a7510257781044
- MD5 c33c1b1b29bfc6f6acf36c84b3c6e47b
- SHA1 dcb986d522ce74e06316d70b2f7d5c952dc327bb
- SHA512 b73c56010fd029ce366eefb1d3fd93c38d830b36ba90e09144650005e207d478f6ccc47da6011e5433e8ba5a66933bfe8aca8e1653135de98cde13a80d5cb844
- SSDEEP 6144:NWVrC1c2oonALgPLj7vf1LKlyIFVirGcEOkCybEaQRuy8K:NkCO2zVPX7vf1LKlIsOkxHy
- TLSH T16AC47C29B690D076C4779574C4A187AAFAB1B432372449CFB3D00B5A1F237E2BA7530E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-02_c33c1b1b29bfc6f6acf36c84b3c6e47b_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_c33c1b1b29bfc6f6acf36c84b3c6e47b_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- SHA256 441814c3a86e59feaa77d8a7867c1dca958f333bd3b38e8309a7510257781044
- MD5 c33c1b1b29bfc6f6acf36c84b3c6e47b
- SHA1 dcb986d522ce74e06316d70b2f7d5c952dc327bb
- SHA512 b73c56010fd029ce366eefb1d3fd93c38d830b36ba90e09144650005e207d478f6ccc47da6011e5433e8ba5a66933bfe8aca8e1653135de98cde13a80d5cb844
- SSDEEP 6144:NWVrC1c2oonALgPLj7vf1LKlyIFVirGcEOkCybEaQRuy8K:NkCO2zVPX7vf1LKlIsOkxHy
- TLSH T16AC47C29B690D076C4779574C4A187AAFAB1B432372449CFB3D00B5A1F237E2BA7530E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory