General
- Target 2026-07-12_9ec12f92e30da890e07556b2b479c215_amadey_coinminer_elex_smoke-loader_stop
- Size 576KB
- Sample260712-pb95mahv5m
- SHA256 7910b2cce05f07677fcd76b2eea7f2bcc3c481ce80ae8a8c01e8c2704f3b0fb1
- MD5 9ec12f92e30da890e07556b2b479c215
- SHA1 107349685e419b559240c3d989ee951729e3790f
- SHA512 194076af033ed4b27ea56e6f29faf46b48941a5af73f26591dac58c0d0468a5bb1795d5dd2ae690874156e8b949a80ef730b7603eeed32259ac945fe0451d676
- SSDEEP 6144:mcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K/:mSvO2x9mONvKRwLSFtsOkx2LIa+yx
- TLSH T16AC46D26B6908072C4779578C4A257AAFBB1BC2127204ACFA390775A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-12_9ec12f92e30da890e07556b2b479c215_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-12_9ec12f92e30da890e07556b2b479c215_amadey_coinminer_elex_smoke-loader_stop
- Size 576KB
- SHA256 7910b2cce05f07677fcd76b2eea7f2bcc3c481ce80ae8a8c01e8c2704f3b0fb1
- MD5 9ec12f92e30da890e07556b2b479c215
- SHA1 107349685e419b559240c3d989ee951729e3790f
- SHA512 194076af033ed4b27ea56e6f29faf46b48941a5af73f26591dac58c0d0468a5bb1795d5dd2ae690874156e8b949a80ef730b7603eeed32259ac945fe0451d676
- SSDEEP 6144:mcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K/:mSvO2x9mONvKRwLSFtsOkx2LIa+yx
- TLSH T16AC46D26B6908072C4779578C4A257AAFBB1BC2127204ACFA390775A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10- Custom signature
UPX dump on OEP (original entry point)
Executes dropped EXE
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
Drops file in System32 directory