General
- Target 2026-07-17_71ef99636fc40934003b782a96f6012f_amadey_coinminer_elex_smoke-loader_stop
- Size 761KB
- Sample260717-2e2nwafy4k
- SHA256 23160009f52db300dcceaf44194feb5d96d115d24179c4a89acaab7d4956309b
- MD5 71ef99636fc40934003b782a96f6012f
- SHA1 744e944d5f644800a8e0f4888aae9fb40e88c5e5
- SHA512 09cc0e0956e926c553d8403e4d2134ee8ac9b2e714b73cbc7660af4c6ba161f8a50ec47e6f776e3659f5492f21d89902714af3a4243ad5d7f1699523d5b6489b
- SSDEEP 12288:ISvO2x9mONvKRwLSFtsOkxHya5hYIW0p98B:DvO2xJKRw2kOkxSkW298B
- TLSH T12EF49E35A2808036C0B34532C6F94AABF9797D35631565CBA3843B662F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-17_71ef99636fc40934003b782a96f6012f_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-17_71ef99636fc40934003b782a96f6012f_amadey_coinminer_elex_smoke-loader_stop
- Size 761KB
- SHA256 23160009f52db300dcceaf44194feb5d96d115d24179c4a89acaab7d4956309b
- MD5 71ef99636fc40934003b782a96f6012f
- SHA1 744e944d5f644800a8e0f4888aae9fb40e88c5e5
- SHA512 09cc0e0956e926c553d8403e4d2134ee8ac9b2e714b73cbc7660af4c6ba161f8a50ec47e6f776e3659f5492f21d89902714af3a4243ad5d7f1699523d5b6489b
- SSDEEP 12288:ISvO2x9mONvKRwLSFtsOkxHya5hYIW0p98B:DvO2xJKRw2kOkxSkW298B
- TLSH T12EF49E35A2808036C0B34532C6F94AABF9797D35631565CBA3843B662F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory