General
- Target 2026-07-12_6b00a005e9701809fcedfbc5ca80819b_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- Sample260712-p4ppdsas7n
- SHA256 db95e6811cfff31f9b74be47d32df802a4e73140f7a3db4f701f6a98fb946dd6
- MD5 6b00a005e9701809fcedfbc5ca80819b
- SHA1 ef1608eaed27038300b37f9163837dfec43dd7c3
- SHA512 39039f4f85050e101a2b5d2286cfec572514a629c3be19e7bd00c0c0b2f3e873f9f361949892f1d97799cac763e3aacd084544f4fd6fe05d8e55381a22f02b8b
- SSDEEP 6144:bcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:bSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T1CED45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-12_6b00a005e9701809fcedfbc5ca80819b_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-12_6b00a005e9701809fcedfbc5ca80819b_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- SHA256 db95e6811cfff31f9b74be47d32df802a4e73140f7a3db4f701f6a98fb946dd6
- MD5 6b00a005e9701809fcedfbc5ca80819b
- SHA1 ef1608eaed27038300b37f9163837dfec43dd7c3
- SHA512 39039f4f85050e101a2b5d2286cfec572514a629c3be19e7bd00c0c0b2f3e873f9f361949892f1d97799cac763e3aacd084544f4fd6fe05d8e55381a22f02b8b
- SSDEEP 6144:bcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:bSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T1CED45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory