General
- Target 2026-07-17_47a09357bc701f27dd25eaabbd74367e_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- Sample260717-ftrlkabv5j
- SHA256 2deefb8e4fb02d12a95f275f866021e2c34715a7a2232d1355df831df285fdc3
- MD5 47a09357bc701f27dd25eaabbd74367e
- SHA1 c9fd027f0f289749584682e8b641a939cd21c376
- SHA512 ba32487b98767783f46767443fbf6b1e560278bd06040b3b153f95c9b6124c7474f43ab8e7550ec552b1b21839478f0cf7c5ec9e8308687fa7660326ad141c49
- SSDEEP 6144:+WVrC1c2oonALgPLj7vf1LKlyIFVirGcEOkCybEaQRXr9HNdvOa+y8K:+kCO2zVPX7vf1LKlIsOkx2LIa+y
- TLSH T1BBC47C2AF6A0C036C4779574C4A257AAFFB1B42127204ACFA390475A1F637E2BE7531D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-17_47a09357bc701f27dd25eaabbd74367e_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-17_47a09357bc701f27dd25eaabbd74367e_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- SHA256 2deefb8e4fb02d12a95f275f866021e2c34715a7a2232d1355df831df285fdc3
- MD5 47a09357bc701f27dd25eaabbd74367e
- SHA1 c9fd027f0f289749584682e8b641a939cd21c376
- SHA512 ba32487b98767783f46767443fbf6b1e560278bd06040b3b153f95c9b6124c7474f43ab8e7550ec552b1b21839478f0cf7c5ec9e8308687fa7660326ad141c49
- SSDEEP 6144:+WVrC1c2oonALgPLj7vf1LKlyIFVirGcEOkCybEaQRXr9HNdvOa+y8K:+kCO2zVPX7vf1LKlIsOkx2LIa+y
- TLSH T1BBC47C2AF6A0C036C4779574C4A257AAFFB1B42127204ACFA390475A1F637E2BE7531D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory