General
- Target 2026-07-07_1d4a3c2629ab2e3e1eaa7c638795a564_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- Sample260707-w53e7sct7w
- SHA256 2edfe519a0539e3a7da5b7da2f6e89f5d8bb0ad65df3f69746e680e805059712
- MD5 1d4a3c2629ab2e3e1eaa7c638795a564
- SHA1 3a3c3796c41f2d16913879e90adc732ac0e27975
- SHA512 c5fa85c0623957c049aec83336121481e3d56f66a759c4ff70863e3b9f3b74cd8aa4d12037c461d771d90b3190ea8d01a241bed0d7edad593ad0e3235db3d8bd
- SSDEEP 6144:rgye71cE4poJTqvpQLXNKFyLWD1nFairGcEOkCybEaQRuy8K:rI7OE4kopQzNKFyLWDHsOkxHy
- TLSH T170C48C2AB690D076C4B7D534C5E197AAEAB17432372449CFA3D0075A1F237E2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-07_1d4a3c2629ab2e3e1eaa7c638795a564_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-07_1d4a3c2629ab2e3e1eaa7c638795a564_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- SHA256 2edfe519a0539e3a7da5b7da2f6e89f5d8bb0ad65df3f69746e680e805059712
- MD5 1d4a3c2629ab2e3e1eaa7c638795a564
- SHA1 3a3c3796c41f2d16913879e90adc732ac0e27975
- SHA512 c5fa85c0623957c049aec83336121481e3d56f66a759c4ff70863e3b9f3b74cd8aa4d12037c461d771d90b3190ea8d01a241bed0d7edad593ad0e3235db3d8bd
- SSDEEP 6144:rgye71cE4poJTqvpQLXNKFyLWD1nFairGcEOkCybEaQRuy8K:rI7OE4kopQzNKFyLWDHsOkxHy
- TLSH T170C48C2AB690D076C4B7D534C5E197AAEAB17432372449CFA3D0075A1F237E2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10- Custom signature
UPX dump on OEP (original entry point)
Executes dropped EXE
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
Drops file in System32 directory