General
- Target 2026-07-14_bab66133518f97432c8c9eed9c75c8ea_amadey_coinminer_elex_smoke-loader_stop
- Size 761KB
- Sample260714-ptvgwsfw7s
- SHA256 6606d081bdbbb9601d703b82b75461c62022c4a516a1dab1705f0bd1bf3da970
- MD5 bab66133518f97432c8c9eed9c75c8ea
- SHA1 3221971ad6d4c27e9923bdf840ebe4f34625c2c0
- SHA512 a93e9a45ce1dd3912a29d9502177ebce9bcc005877b1861232ae78577d9a582fa53523abb278ab16f61243576b90230ec97b4eca7462e7ebf29246b4ade5e7d3
- SSDEEP 12288:gSvO2x9mONvKRwLSFtsOkxHya5hYIW0p98B:7vO2xJKRw2kOkxSkW298B
- TLSH T171F49E35A2808036C0B34532C6F94AABF9797D35631565CBA3843B662F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-14_bab66133518f97432c8c9eed9c75c8ea_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-14_bab66133518f97432c8c9eed9c75c8ea_amadey_coinminer_elex_smoke-loader_stop
- Size 761KB
- SHA256 6606d081bdbbb9601d703b82b75461c62022c4a516a1dab1705f0bd1bf3da970
- MD5 bab66133518f97432c8c9eed9c75c8ea
- SHA1 3221971ad6d4c27e9923bdf840ebe4f34625c2c0
- SHA512 a93e9a45ce1dd3912a29d9502177ebce9bcc005877b1861232ae78577d9a582fa53523abb278ab16f61243576b90230ec97b4eca7462e7ebf29246b4ade5e7d3
- SSDEEP 12288:gSvO2x9mONvKRwLSFtsOkxHya5hYIW0p98B:7vO2xJKRw2kOkxSkW298B
- TLSH T171F49E35A2808036C0B34532C6F94AABF9797D35631565CBA3843B662F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Custom signature
UPX dump on OEP (original entry point)
Executes dropped EXE
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
Drops file in System32 directory