General
- Target 2026-07-16_f497f6289ceb8af2a6b430acd8c9de37_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- Sample260716-hst2eae14k
- SHA256 47dd65f95a5b49799446f699edc769862504a25404683084292cd4f05058a1d8
- MD5 f497f6289ceb8af2a6b430acd8c9de37
- SHA1 526d30301a515c767f2a8c2ec5f87a9269f748b1
- SHA512 13abcdc926000d149a1dcf87b508974f56eb2cd1dd031a068b86fd0f4ae31a3cd0b3de7ef42f2a7f20a6bbc92aea970eecac04e170212e9681b31cb777ec581c
- SSDEEP 6144:R4ZaN1cb90oOTFmIFLq0cvnXhLCqj2EFNirGcEOkCybEaQRuy8K:RrNOb9+sIF+0cvnXhLCqEsOkxHy
- TLSH T1BFC48D29B6E0C076C4B79578C4A186B6FAB17832372459CFA394075A1F337E2BA3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-16_f497f6289ceb8af2a6b430acd8c9de37_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-16_f497f6289ceb8af2a6b430acd8c9de37_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- SHA256 47dd65f95a5b49799446f699edc769862504a25404683084292cd4f05058a1d8
- MD5 f497f6289ceb8af2a6b430acd8c9de37
- SHA1 526d30301a515c767f2a8c2ec5f87a9269f748b1
- SHA512 13abcdc926000d149a1dcf87b508974f56eb2cd1dd031a068b86fd0f4ae31a3cd0b3de7ef42f2a7f20a6bbc92aea970eecac04e170212e9681b31cb777ec581c
- SSDEEP 6144:R4ZaN1cb90oOTFmIFLq0cvnXhLCqj2EFNirGcEOkCybEaQRuy8K:RrNOb9+sIF+0cvnXhLCqEsOkxHy
- TLSH T1BFC48D29B6E0C076C4B79578C4A186B6FAB17832372459CFA394075A1F337E2BA3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory