General
- Target 2026-07-15_ff761b5d10f91a59b80bc9f99e31e682_amadey_coinminer_elex_smoke-loader_stop
- Size 576KB
- Sample260716-blngqadv3w
- SHA256 2de523596ad7d3e7c056d7c0e601023fcf1e78b2492d0556a18933bd9b93628a
- MD5 ff761b5d10f91a59b80bc9f99e31e682
- SHA1 2af8a3d56aefeaeed32d945698b3bf1a402fd76b
- SHA512 1a4ec36dbd2df9a8da84394d93b3e8c8801e5d5d8366f17150b6c1e32297b38ae92eada086914688da0f8fda416081af9ee7a910faa614897541efe9676fe642
- SSDEEP 6144:CcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K/:CSvO2x9mONvKRwLSFtsOkx2LIa+yx
- TLSH T1C9C46D26B6908072C4779578C4A257AAFBB1BC2127204ACFA390775A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-15_ff761b5d10f91a59b80bc9f99e31e682_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-15_ff761b5d10f91a59b80bc9f99e31e682_amadey_coinminer_elex_smoke-loader_stop
- Size 576KB
- SHA256 2de523596ad7d3e7c056d7c0e601023fcf1e78b2492d0556a18933bd9b93628a
- MD5 ff761b5d10f91a59b80bc9f99e31e682
- SHA1 2af8a3d56aefeaeed32d945698b3bf1a402fd76b
- SHA512 1a4ec36dbd2df9a8da84394d93b3e8c8801e5d5d8366f17150b6c1e32297b38ae92eada086914688da0f8fda416081af9ee7a910faa614897541efe9676fe642
- SSDEEP 6144:CcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K/:CSvO2x9mONvKRwLSFtsOkx2LIa+yx
- TLSH T1C9C46D26B6908072C4779578C4A257AAFBB1BC2127204ACFA390775A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Custom signature
UPX dump on OEP (original entry point)
Executes dropped EXE
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
Drops file in System32 directory