General
- Target 2026-07-14_13341a2c3297e5971de52b2f09c7183b_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- Sample260714-e47j4agv9w
- SHA256 2e68ff94cc72444d37f71d3de1d18a970b29de2b4c5b6938825b5aaf7c0ddaef
- MD5 13341a2c3297e5971de52b2f09c7183b
- SHA1 7481c6268ad5c5cdcb120f2946cd415e014d9b00
- SHA512 74aac3b0860312426c322d7b31f66fb4be3859f493de3c31745e7850c303083b3689880a1746d9fba0eb64cb3b6c3ccd4fe74ce14b022da1baaf2cdf79f670aa
- SSDEEP 6144:5gye71cE4poJTqvpQLXNKFyLWD1nFairGcEOkCybEaQRuy8K:5I7OE4kopQzNKFyLWDHsOkxHy
- TLSH T102C48C2AB690C076C4B7D534C5E197AAEAB17432372449CFA3D0075A1F237E2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-14_13341a2c3297e5971de52b2f09c7183b_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-14_13341a2c3297e5971de52b2f09c7183b_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- SHA256 2e68ff94cc72444d37f71d3de1d18a970b29de2b4c5b6938825b5aaf7c0ddaef
- MD5 13341a2c3297e5971de52b2f09c7183b
- SHA1 7481c6268ad5c5cdcb120f2946cd415e014d9b00
- SHA512 74aac3b0860312426c322d7b31f66fb4be3859f493de3c31745e7850c303083b3689880a1746d9fba0eb64cb3b6c3ccd4fe74ce14b022da1baaf2cdf79f670aa
- SSDEEP 6144:5gye71cE4poJTqvpQLXNKFyLWD1nFairGcEOkCybEaQRuy8K:5I7OE4kopQzNKFyLWDHsOkxHy
- TLSH T102C48C2AB690C076C4B7D534C5E197AAEAB17432372449CFA3D0075A1F237E2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory