General
- Target 2026-07-09_87eb0460753bce96cf3802fa69938a48_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- Sample260709-pvxnmsav9m
- SHA256 a17e2b84d313dfea964220bda629f47847d486ff8506c7664e90eed84ea81033
- MD5 87eb0460753bce96cf3802fa69938a48
- SHA1 4dc6497580c25b69bd1980b2a3872c37bb4e50b0
- SHA512 73397366ed77f887986693794672c6d830ff277cc584933624cec956f66a6faadcd50928c9a9bd4b46219706894370682694f6b6695d8535b1dd7f00a8719443
- SSDEEP 6144:AcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:ASvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T1D1D45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-09_87eb0460753bce96cf3802fa69938a48_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_87eb0460753bce96cf3802fa69938a48_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- SHA256 a17e2b84d313dfea964220bda629f47847d486ff8506c7664e90eed84ea81033
- MD5 87eb0460753bce96cf3802fa69938a48
- SHA1 4dc6497580c25b69bd1980b2a3872c37bb4e50b0
- SHA512 73397366ed77f887986693794672c6d830ff277cc584933624cec956f66a6faadcd50928c9a9bd4b46219706894370682694f6b6695d8535b1dd7f00a8719443
- SSDEEP 6144:AcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:ASvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T1D1D45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory