General
- Target 2026-07-14_a42cbcab0c2976214952d400b6a6fe57_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- Sample260714-dw4mssds7q
- SHA256 2a351d7e6f2a4d10e1a87cc079ec324aa2d82feb9cb8e4439672e482c07015c2
- MD5 a42cbcab0c2976214952d400b6a6fe57
- SHA1 0e2fe12465ff13c1cc1d0c983b6bf4ec0ca9ccf4
- SHA512 f2d917c07f5dfcb9852bb272cd7d67d1f7f2b382ffae817addbc645629678e3acb81f682ecd6c8d60adb3f3cff3e96e9b8b132ff8a4ccbb7892dbb0b53302539
- SSDEEP 6144:XcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:XSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T18DD45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-14_a42cbcab0c2976214952d400b6a6fe57_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-14_a42cbcab0c2976214952d400b6a6fe57_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- SHA256 2a351d7e6f2a4d10e1a87cc079ec324aa2d82feb9cb8e4439672e482c07015c2
- MD5 a42cbcab0c2976214952d400b6a6fe57
- SHA1 0e2fe12465ff13c1cc1d0c983b6bf4ec0ca9ccf4
- SHA512 f2d917c07f5dfcb9852bb272cd7d67d1f7f2b382ffae817addbc645629678e3acb81f682ecd6c8d60adb3f3cff3e96e9b8b132ff8a4ccbb7892dbb0b53302539
- SSDEEP 6144:XcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:XSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T18DD45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Custom signature
UPX dump on OEP (original entry point)
Executes dropped EXE
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
Drops file in System32 directory