General
- Target 2026-07-12_983a8117a928f5f208ed12131bcf560e_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- Sample260712-pekn5sbw2t
- SHA256 833b1eebdc9efae35c4719b96383c06610714fcb706a3531da0ba52f5c9a452d
- MD5 983a8117a928f5f208ed12131bcf560e
- SHA1 8ffa96ff83d96f3c4a19879ffefd843871fc9fcd
- SHA512 e943b40966700588c86b12e6135220a466edc2cf7f0f2ebdda131265770a91bc9c84ef4dd8424ce887c69160dc8ea3fc7dd4b675b153e13459e73d78548a6bf5
- SSDEEP 6144:NUJJuV1cdhIoA7vJ0CLoCgvDLe4AmFvirGcEOkCybEaQRuy8K:NYsVOdhElvkCgvDLe4usOkxHy
- TLSH T19DC48D29B6D0C036C5B39574C4A186BAEAB17432372549CFA3D5475A0F337E2BA7930E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-12_983a8117a928f5f208ed12131bcf560e_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-12_983a8117a928f5f208ed12131bcf560e_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- SHA256 833b1eebdc9efae35c4719b96383c06610714fcb706a3531da0ba52f5c9a452d
- MD5 983a8117a928f5f208ed12131bcf560e
- SHA1 8ffa96ff83d96f3c4a19879ffefd843871fc9fcd
- SHA512 e943b40966700588c86b12e6135220a466edc2cf7f0f2ebdda131265770a91bc9c84ef4dd8424ce887c69160dc8ea3fc7dd4b675b153e13459e73d78548a6bf5
- SSDEEP 6144:NUJJuV1cdhIoA7vJ0CLoCgvDLe4AmFvirGcEOkCybEaQRuy8K:NYsVOdhElvkCgvDLe4usOkxHy
- TLSH T19DC48D29B6D0C036C5B39574C4A186BAEAB17432372549CFA3D5475A0F337E2BA7930E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory