General
- Target 2026-07-10_fcf9b1ea439f081f11f7a5621d4812fd_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- Sample260710-1jrtssdv8y
- SHA256 ba9c9fb98f08a10b2af3d0cfc3c2af2b56fe6d66a44a5cc29d0468a1ccf57b39
- MD5 fcf9b1ea439f081f11f7a5621d4812fd
- SHA1 1827447b6ec1796e516f7930f7f52f1af66b1092
- SHA512 b798e869ca149e14ac24d13dadec1083eaa5d6172596982e1499c7f0c3b7ad9250af497a1826b75898a1e414a026dfa092821ab0e45975c2b3cc910b9eb206eb
- SSDEEP 6144:36UE71cqQEoMr5C2iKLJChYSvL+8xPFxirGcEOkCybEaQRXr9HNdvOa+y8K:3O7OqQs42iKFChYSvL+8AsOkx2LIa+y
- TLSH T15EC46C26B6A0D076C4B79574C4A28BA6FFB1742227244BCFA39047561F637E2BE3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-10_fcf9b1ea439f081f11f7a5621d4812fd_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-10_fcf9b1ea439f081f11f7a5621d4812fd_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- SHA256 ba9c9fb98f08a10b2af3d0cfc3c2af2b56fe6d66a44a5cc29d0468a1ccf57b39
- MD5 fcf9b1ea439f081f11f7a5621d4812fd
- SHA1 1827447b6ec1796e516f7930f7f52f1af66b1092
- SHA512 b798e869ca149e14ac24d13dadec1083eaa5d6172596982e1499c7f0c3b7ad9250af497a1826b75898a1e414a026dfa092821ab0e45975c2b3cc910b9eb206eb
- SSDEEP 6144:36UE71cqQEoMr5C2iKLJChYSvL+8xPFxirGcEOkCybEaQRXr9HNdvOa+y8K:3O7OqQs42iKFChYSvL+8AsOkx2LIa+y
- TLSH T15EC46C26B6A0D076C4B79574C4A28BA6FFB1742227244BCFA39047561F637E2BE3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory