General
- Target 2026-07-02_a4380051a041c9c333a1b29bd7e333af_amadey_coinminer_elex_smoke-loader_stop
- Size 511KB
- Sample260702-vesmmsft6k
- SHA256 d1d48f944719a41ac5f14f977d7b415f60c38c3737cb9e18d12dd5330c37354c
- MD5 a4380051a041c9c333a1b29bd7e333af
- SHA1 5f331294bff6ec0deb7ea6bb89c61e83e1918be2
- SHA512 f9b4bb2f4498d85fd826f925cdf4572357f4a44abc704128e676ef4ddc4c8f64435f6fa34d03fe1eff69698379999ea14d6d2ca73133b588942352f123253f2e
- SSDEEP 6144:fcTgav1cdCTuoPbgwmOLJvKRILSFvdFDcEOkCybEaQRXr9HNdvOax5Rv0:fSvO2x9mONvKRILSFnOkx2LIax5F0
- TLSH T194B45C26F6908036C4B34575C5F64BAAFAB4BC21631156CBA3943A6A1F737D2BD3130E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-02_a4380051a041c9c333a1b29bd7e333af_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_a4380051a041c9c333a1b29bd7e333af_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_a4380051a041c9c333a1b29bd7e333af_amadey_coinminer_elex_smoke-loader_stop
- Size 511KB
- SHA256 d1d48f944719a41ac5f14f977d7b415f60c38c3737cb9e18d12dd5330c37354c
- MD5 a4380051a041c9c333a1b29bd7e333af
- SHA1 5f331294bff6ec0deb7ea6bb89c61e83e1918be2
- SHA512 f9b4bb2f4498d85fd826f925cdf4572357f4a44abc704128e676ef4ddc4c8f64435f6fa34d03fe1eff69698379999ea14d6d2ca73133b588942352f123253f2e
- SSDEEP 6144:fcTgav1cdCTuoPbgwmOLJvKRILSFvdFDcEOkCybEaQRXr9HNdvOax5Rv0:fSvO2x9mONvKRILSFnOkx2LIax5F0
- TLSH T194B45C26F6908036C4B34575C5F64BAAFAB4BC21631156CBA3943A6A1F737D2BD3130E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Executes dropped EXE
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
Drops file in System32 directory