General
- Target 2026-07-02_1f6699cb94b6d62c7d722b7ed731ff40_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- Sample260702-2yp47acz3l
- SHA256 f1d6a26bea4da45b7b2637e9898470a5aaf0a0f5fc81e0273f0396d53a1f0b65
- MD5 1f6699cb94b6d62c7d722b7ed731ff40
- SHA1 6137480e5a90a32e3a8c7f6e9a4673d73c75fcb9
- SHA512 61b6f5222d995bc8ded25b8f4a25fb45d9e4a963e5b24ea36ccc3fd3bc2c32e21319ea82219f7f25326dda96b6083cf8362505c1f48d696d70953c28ff44a304
- SSDEEP 6144:scTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:sSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T1D8D45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-02_1f6699cb94b6d62c7d722b7ed731ff40_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_1f6699cb94b6d62c7d722b7ed731ff40_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- SHA256 f1d6a26bea4da45b7b2637e9898470a5aaf0a0f5fc81e0273f0396d53a1f0b65
- MD5 1f6699cb94b6d62c7d722b7ed731ff40
- SHA1 6137480e5a90a32e3a8c7f6e9a4673d73c75fcb9
- SHA512 61b6f5222d995bc8ded25b8f4a25fb45d9e4a963e5b24ea36ccc3fd3bc2c32e21319ea82219f7f25326dda96b6083cf8362505c1f48d696d70953c28ff44a304
- SSDEEP 6144:scTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:sSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T1D8D45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory