General
- Target 2026-07-14_ad9c0854c770281a7ffce85f44e4d11f_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- Sample260714-ds3lbsfv3s
- SHA256 8d6bb97369f7ac2c18c28c9e496ff3e51dd54c392d0c57a311e59daebdbe6d0f
- MD5 ad9c0854c770281a7ffce85f44e4d11f
- SHA1 cf53a8281845d56b597d8a36a2df1f4469de32e0
- SHA512 5c6ce8e5cadae67d7937e1292e7cd0feb59ea829419c2c6c32a3bab47f4348fe63df9ec9946bb99b5b640957f7220ec227f16b99f3427510454c959082c72da4
- SSDEEP 6144:acTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:aSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T116D45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-14_ad9c0854c770281a7ffce85f44e4d11f_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-14_ad9c0854c770281a7ffce85f44e4d11f_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- SHA256 8d6bb97369f7ac2c18c28c9e496ff3e51dd54c392d0c57a311e59daebdbe6d0f
- MD5 ad9c0854c770281a7ffce85f44e4d11f
- SHA1 cf53a8281845d56b597d8a36a2df1f4469de32e0
- SHA512 5c6ce8e5cadae67d7937e1292e7cd0feb59ea829419c2c6c32a3bab47f4348fe63df9ec9946bb99b5b640957f7220ec227f16b99f3427510454c959082c72da4
- SSDEEP 6144:acTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:aSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T116D45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory