General
- Target 2026-07-11_3ecc5156bba38911470d37e12e67cdac_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- Sample260711-dltd3say7q
- SHA256 9f2ea1d3ad83328855c8c230b9ef2efb7c7de67811483aa6ae92853982f5d506
- MD5 3ecc5156bba38911470d37e12e67cdac
- SHA1 294080c816d9f3e4225122e4d8fb3fdd16a881b5
- SHA512 f3d5c2a29641aba817597979d22cf1c2b5f3330ececcbd5a302d4c9ca4c4ec63d33f118555fd0cc0edb071598c3682e2e6e389fbc1004d7de75d750153a3a9c3
- SSDEEP 6144:9gye71cE4poJTqvpQLXNKFyLWD1nFairGcEOkCybEaQRuy8K:9I7OE4kopQzNKFyLWDHsOkxHy
- TLSH T16EC48C2AB690C076C4B7D534C5E197AAEAB17432372449CFA3D0075A1F237E2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-11_3ecc5156bba38911470d37e12e67cdac_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-11_3ecc5156bba38911470d37e12e67cdac_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- SHA256 9f2ea1d3ad83328855c8c230b9ef2efb7c7de67811483aa6ae92853982f5d506
- MD5 3ecc5156bba38911470d37e12e67cdac
- SHA1 294080c816d9f3e4225122e4d8fb3fdd16a881b5
- SHA512 f3d5c2a29641aba817597979d22cf1c2b5f3330ececcbd5a302d4c9ca4c4ec63d33f118555fd0cc0edb071598c3682e2e6e389fbc1004d7de75d750153a3a9c3
- SSDEEP 6144:9gye71cE4poJTqvpQLXNKFyLWD1nFairGcEOkCybEaQRuy8K:9I7OE4kopQzNKFyLWDHsOkxHy
- TLSH T16EC48C2AB690C076C4B7D534C5E197AAEAB17432372449CFA3D0075A1F237E2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10- Custom signature
UPX dump on OEP (original entry point)
Executes dropped EXE
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
Drops file in System32 directory