General
- Target 2026-07-12_04d4f03f8a1fe2878aca49a8eeca3fa5_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- Sample260712-ryvpkabx8q
- SHA256 8c65c2ad18abdce4ff143b7236fc8e03ce068b95f5148181239a7f076c5c662c
- MD5 04d4f03f8a1fe2878aca49a8eeca3fa5
- SHA1 021162ff9dc63692db756bdaf751031497e519f4
- SHA512 d1fdf253990a395fbb99c53ce3e134c9490ccd9e35ccba34a4e78d63a453deed12121e502ec59340564bbfd58b4178167a7d44b5a6d89f2e1cc75f001edd3e21
- SSDEEP 6144:qcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:qSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T1A7D45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-12_04d4f03f8a1fe2878aca49a8eeca3fa5_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-12_04d4f03f8a1fe2878aca49a8eeca3fa5_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- SHA256 8c65c2ad18abdce4ff143b7236fc8e03ce068b95f5148181239a7f076c5c662c
- MD5 04d4f03f8a1fe2878aca49a8eeca3fa5
- SHA1 021162ff9dc63692db756bdaf751031497e519f4
- SHA512 d1fdf253990a395fbb99c53ce3e134c9490ccd9e35ccba34a4e78d63a453deed12121e502ec59340564bbfd58b4178167a7d44b5a6d89f2e1cc75f001edd3e21
- SSDEEP 6144:qcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:qSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T1A7D45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Custom signature
UPX dump on OEP (original entry point)
Executes dropped EXE
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
Drops file in System32 directory