General
- Target 2026-07-11_947d8f9e9cdd8900a1a5b99052d852f3_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- Sample260711-ey6evabv5m
- SHA256 49d80f18d667aa3252213bf3841b0f32db09eb3f0bfc4730805b8782def7d0c0
- MD5 947d8f9e9cdd8900a1a5b99052d852f3
- SHA1 379a9773666c471d20309bead5733fec96254fc7
- SHA512 9e5ab6e4f5e3bc0cfb73d5ad89667b422fa578492a0070c59db546ddddeeacc6169c95bfe97dfad3552e62a35e0d44cc2b66a8ba8d4e4313149118fa48e0a63d
- SSDEEP 6144:FcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:FSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T1EAD45B35A6808036C0B74631C6F64BAAF9B5BC21631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-11_947d8f9e9cdd8900a1a5b99052d852f3_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-11_947d8f9e9cdd8900a1a5b99052d852f3_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- SHA256 49d80f18d667aa3252213bf3841b0f32db09eb3f0bfc4730805b8782def7d0c0
- MD5 947d8f9e9cdd8900a1a5b99052d852f3
- SHA1 379a9773666c471d20309bead5733fec96254fc7
- SHA512 9e5ab6e4f5e3bc0cfb73d5ad89667b422fa578492a0070c59db546ddddeeacc6169c95bfe97dfad3552e62a35e0d44cc2b66a8ba8d4e4313149118fa48e0a63d
- SSDEEP 6144:FcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:FSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T1EAD45B35A6808036C0B74631C6F64BAAF9B5BC21631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory