General
- Target 2026-07-07_3800a251e329665cc2db415935646418_amadey_coinminer_elex_smoke-loader_stop
- Size 576KB
- Sample260708-bdgzzagz4t
- SHA256 4448dee967f3746d6fd3d82f9f7046a1463f7e9cbcb792e364fc1872a2dbacc2
- MD5 3800a251e329665cc2db415935646418
- SHA1 196269c6c404ce4f13b61d1ce19d9f1c5e01665c
- SHA512 8024539bd0fd4f1a4d6306eae52f6c54a5a9b3b7d6efe294fbe34d9d356f4ad21ea9e06a543836881dd0984cbdacd6185b9b9ec23a418904390cb52d292e5b99
- SSDEEP 6144:TcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K/:TSvO2x9mONvKRwLSFtsOkx2LIa+yx
- TLSH T1D6C46D26B6908072C4779578C4A257AAFBB1BC2127204ACFA390775A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-07_3800a251e329665cc2db415935646418_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-07_3800a251e329665cc2db415935646418_amadey_coinminer_elex_smoke-loader_stop
- Size 576KB
- SHA256 4448dee967f3746d6fd3d82f9f7046a1463f7e9cbcb792e364fc1872a2dbacc2
- MD5 3800a251e329665cc2db415935646418
- SHA1 196269c6c404ce4f13b61d1ce19d9f1c5e01665c
- SHA512 8024539bd0fd4f1a4d6306eae52f6c54a5a9b3b7d6efe294fbe34d9d356f4ad21ea9e06a543836881dd0984cbdacd6185b9b9ec23a418904390cb52d292e5b99
- SSDEEP 6144:TcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K/:TSvO2x9mONvKRwLSFtsOkx2LIa+yx
- TLSH T1D6C46D26B6908072C4779578C4A257AAFBB1BC2127204ACFA390775A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Custom signature
UPX dump on OEP (original entry point)
Executes dropped EXE
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
Drops file in System32 directory