General
- Target 2026-07-07_ab872c50b59283409bf2f7c65e850d42_amadey_coinminer_elex_smoke-loader_stop
- Size 576KB
- Sample260708-a8my2agy4y
- SHA256 499385d2dfeb5ab2e64bc917aafb3a09b0686f32473e5cf6d733e93982062c9c
- MD5 ab872c50b59283409bf2f7c65e850d42
- SHA1 c6b04a79fefe999c43f05675026fa306b85c6063
- SHA512 ed18a7118ab6924335185c0942f1df804d6caea64f37e5dcf20cd225379d60e5117285255452f0e346a46804e9821b011ad9ddfa54a307881e9a750c73fac833
- SSDEEP 6144:DcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K/:DSvO2x9mONvKRwLSFtsOkx2LIa+yx
- TLSH T154C46D26B6908072C4779578C4A257AAFBB1BC2127204ACFA390775A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-07_ab872c50b59283409bf2f7c65e850d42_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-07_ab872c50b59283409bf2f7c65e850d42_amadey_coinminer_elex_smoke-loader_stop
- Size 576KB
- SHA256 499385d2dfeb5ab2e64bc917aafb3a09b0686f32473e5cf6d733e93982062c9c
- MD5 ab872c50b59283409bf2f7c65e850d42
- SHA1 c6b04a79fefe999c43f05675026fa306b85c6063
- SHA512 ed18a7118ab6924335185c0942f1df804d6caea64f37e5dcf20cd225379d60e5117285255452f0e346a46804e9821b011ad9ddfa54a307881e9a750c73fac833
- SSDEEP 6144:DcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K/:DSvO2x9mONvKRwLSFtsOkx2LIa+yx
- TLSH T154C46D26B6908072C4779578C4A257AAFBB1BC2127204ACFA390775A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory