General
- Target 2026-07-14_d9085a6020753a5d5d48d075dbfa0afd_amadey_coinminer_elex_smoke-loader_stop
- Size 576KB
- Sample260714-deq1dacy8p
- SHA256 4f82aa8f9cc2ec49d525121a1a638ca82a2e09a0b1e2ffd396be33a0dcbbf8a1
- MD5 d9085a6020753a5d5d48d075dbfa0afd
- SHA1 594e06db0dcc7f5f94c2aa928d6f73fc7bd0259a
- SHA512 37e3b9c3d8cf93f788386ec9fc903fea574e8c873c4e9bf80ed5bc8d11184d0d23b1c180af1a36a0de489b6ad8f3b3cc71d14e2403dbc3cadeac6c3bacbf5550
- SSDEEP 6144:9cTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K/:9SvO2x9mONvKRwLSFtsOkx2LIa+yx
- TLSH T118C46D26B6908072C4779578C4A257AAFBB1BC2127204ACFA390775A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-14_d9085a6020753a5d5d48d075dbfa0afd_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-14_d9085a6020753a5d5d48d075dbfa0afd_amadey_coinminer_elex_smoke-loader_stop
- Size 576KB
- SHA256 4f82aa8f9cc2ec49d525121a1a638ca82a2e09a0b1e2ffd396be33a0dcbbf8a1
- MD5 d9085a6020753a5d5d48d075dbfa0afd
- SHA1 594e06db0dcc7f5f94c2aa928d6f73fc7bd0259a
- SHA512 37e3b9c3d8cf93f788386ec9fc903fea574e8c873c4e9bf80ed5bc8d11184d0d23b1c180af1a36a0de489b6ad8f3b3cc71d14e2403dbc3cadeac6c3bacbf5550
- SSDEEP 6144:9cTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K/:9SvO2x9mONvKRwLSFtsOkx2LIa+yx
- TLSH T118C46D26B6908072C4779578C4A257AAFBB1BC2127204ACFA390775A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory