General
- Target 2026-07-07_ab55ecaa02b4ca6961fdf1920aa2d2bf_amadey_coinminer_elex_smoke-loader_stop
- Size 576KB
- Sample260707-2se22ags4q
- SHA256 1aea3af4c7bdff7f081a397308387b9808259f1daa4f5a51c5407e16f9a03226
- MD5 ab55ecaa02b4ca6961fdf1920aa2d2bf
- SHA1 e10bdfb6dedf7dedd723fbfc07e1ea377d2595b4
- SHA512 6f47b446b16d96ff58dd61f606eee507f8b1e7a6a7742c199c2e3caa3e30399cd344af0e84dd723d93c05c3a24a123882abb1611361d1ba1c3f069b1f3493c77
- SSDEEP 6144:KcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K/:KSvO2x9mONvKRwLSFtsOkx2LIa+yx
- TLSH T19EC46D26B6908072C4779578C4A257AAFBB1BC2127204ACFA390775A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-07_ab55ecaa02b4ca6961fdf1920aa2d2bf_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-07_ab55ecaa02b4ca6961fdf1920aa2d2bf_amadey_coinminer_elex_smoke-loader_stop
- Size 576KB
- SHA256 1aea3af4c7bdff7f081a397308387b9808259f1daa4f5a51c5407e16f9a03226
- MD5 ab55ecaa02b4ca6961fdf1920aa2d2bf
- SHA1 e10bdfb6dedf7dedd723fbfc07e1ea377d2595b4
- SHA512 6f47b446b16d96ff58dd61f606eee507f8b1e7a6a7742c199c2e3caa3e30399cd344af0e84dd723d93c05c3a24a123882abb1611361d1ba1c3f069b1f3493c77
- SSDEEP 6144:KcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K/:KSvO2x9mONvKRwLSFtsOkx2LIa+yx
- TLSH T19EC46D26B6908072C4779578C4A257AAFBB1BC2127204ACFA390775A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory