General
- Target 2026-07-12_e8ce26633639e8eb4709f7ac0137ac9b_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- Sample260712-j2pcysgt5x
- SHA256 25fbb70715545a2720c774c8f9e17d8c719e3601bfb4fc8643723d9a16802b74
- MD5 e8ce26633639e8eb4709f7ac0137ac9b
- SHA1 739959c26ad087a9cde15274a00810c9478b42ab
- SHA512 ce9284bdd1cbc9a52efc160644e1ee4fce14ee363af6808ebecb5d870e98c2748669b9e789a7d794ff157399b684b7562eed7063c6c702bc1cf479244f647375
- SSDEEP 6144:OcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:OSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T158D45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-12_e8ce26633639e8eb4709f7ac0137ac9b_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-12_e8ce26633639e8eb4709f7ac0137ac9b_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- SHA256 25fbb70715545a2720c774c8f9e17d8c719e3601bfb4fc8643723d9a16802b74
- MD5 e8ce26633639e8eb4709f7ac0137ac9b
- SHA1 739959c26ad087a9cde15274a00810c9478b42ab
- SHA512 ce9284bdd1cbc9a52efc160644e1ee4fce14ee363af6808ebecb5d870e98c2748669b9e789a7d794ff157399b684b7562eed7063c6c702bc1cf479244f647375
- SSDEEP 6144:OcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:OSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T158D45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory