General
- Target 2026-07-17_0eb1e6f2c6bb19aa698555fac5e9a6ca_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- Sample260717-3ynrssdv8x
- SHA256 2784850e1752a3d35b26e7be0f4b102dbda7f128ab7838c9d046782ac55fee28
- MD5 0eb1e6f2c6bb19aa698555fac5e9a6ca
- SHA1 90ae49f79bfd56cffcf921a41af8b9a4081a9414
- SHA512 fbc4b5ed1c2f155e449a370300331b24badde0266bb0fc46da0799f8b11edee80ce3c0e7eb5e858df83971ff6d009c87739c7c35e836e6b96aecb58b6163b16f
- SSDEEP 6144:BWVrC1c2oonALgPLj7vf1LKlyIFVirGcEOkCybEaQRuy8K:BkCO2zVPX7vf1LKlIsOkxHy
- TLSH T1A7C47C29B690D076C4779574C4A187AAFAB1B432372449CFB3D40B5A1F237E2BA7530E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-17_0eb1e6f2c6bb19aa698555fac5e9a6ca_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-17_0eb1e6f2c6bb19aa698555fac5e9a6ca_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- SHA256 2784850e1752a3d35b26e7be0f4b102dbda7f128ab7838c9d046782ac55fee28
- MD5 0eb1e6f2c6bb19aa698555fac5e9a6ca
- SHA1 90ae49f79bfd56cffcf921a41af8b9a4081a9414
- SHA512 fbc4b5ed1c2f155e449a370300331b24badde0266bb0fc46da0799f8b11edee80ce3c0e7eb5e858df83971ff6d009c87739c7c35e836e6b96aecb58b6163b16f
- SSDEEP 6144:BWVrC1c2oonALgPLj7vf1LKlyIFVirGcEOkCybEaQRuy8K:BkCO2zVPX7vf1LKlIsOkxHy
- TLSH T1A7C47C29B690D076C4779574C4A187AAFAB1B432372449CFB3D40B5A1F237E2BA7530E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory