General
- Target 2026-07-11_4fbea501f9c1da56b52d3b9ffaeaae1a_amadey_coinminer_elex_smoke-loader_stop
- Size 766KB
- Sample260711-e9j1zsbx6n
- SHA256 fd4d283b0ad3270b46ede6f290596279b2524e44396865882c4cde503f592d79
- MD5 4fbea501f9c1da56b52d3b9ffaeaae1a
- SHA1 f03d3ea1fec467b2b664973cf6cf644536933fc4
- SHA512 9f377191a300e2ae400fdbc657f31f7e079cc6f0a1296a203bbf4d844dc63e5a5a6ec5f75bbf838d37fd9d358b855df021bd862b82427107d4e940cfec8306f7
- SSDEEP 12288:HSvO2x9mONvKRwLSFtsOkx2LIa+ya5FAQjU/Liw:yvO2xJKRw2kOkx2LFRvcUV
- TLSH T136F45A31E241C03AD0A74576C6FA0BAFE564BD25531155CBA3C43A6A2FB36D2BE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-11_4fbea501f9c1da56b52d3b9ffaeaae1a_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-11_4fbea501f9c1da56b52d3b9ffaeaae1a_amadey_coinminer_elex_smoke-loader_stop
- Size 766KB
- SHA256 fd4d283b0ad3270b46ede6f290596279b2524e44396865882c4cde503f592d79
- MD5 4fbea501f9c1da56b52d3b9ffaeaae1a
- SHA1 f03d3ea1fec467b2b664973cf6cf644536933fc4
- SHA512 9f377191a300e2ae400fdbc657f31f7e079cc6f0a1296a203bbf4d844dc63e5a5a6ec5f75bbf838d37fd9d358b855df021bd862b82427107d4e940cfec8306f7
- SSDEEP 12288:HSvO2x9mONvKRwLSFtsOkx2LIa+ya5FAQjU/Liw:yvO2xJKRw2kOkx2LFRvcUV
- TLSH T136F45A31E241C03AD0A74576C6FA0BAFE564BD25531155CBA3C43A6A2FB36D2BE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Custom signature
UPX dump on OEP (original entry point)
Executes dropped EXE
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
Drops file in System32 directory