General
- Target 2026-07-17_e3b9036097de64c7f094570af1d2b55c_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- Sample260717-gslvcsfx61
- SHA256 c87e4961255b759056ac38527f8f31abd5114bb89c1478777b896dbf8793aa1f
- MD5 e3b9036097de64c7f094570af1d2b55c
- SHA1 8a892709c23fefd41a0621464d1ad2182ac80424
- SHA512 1fe15d857b067e9744b3dc14a5af2c01911173f972ce4cf3df04f5260f582a815134a0c226dc7d05eb69f8feaa67f25ba0f65937bc0b33b3a030fa7c57dfb961
- SSDEEP 6144:J4ZaN1cb90oOTFmIFLq0cvnXhLCqj2EFNirGcEOkCybEaQRuy8K:JrNOb9+sIF+0cvnXhLCqEsOkxHy
- TLSH T110C48D29B6E0C076C4B79578C4A186B6FAB17832372459CFA394075A1F337E2BA3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-17_e3b9036097de64c7f094570af1d2b55c_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-17_e3b9036097de64c7f094570af1d2b55c_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- SHA256 c87e4961255b759056ac38527f8f31abd5114bb89c1478777b896dbf8793aa1f
- MD5 e3b9036097de64c7f094570af1d2b55c
- SHA1 8a892709c23fefd41a0621464d1ad2182ac80424
- SHA512 1fe15d857b067e9744b3dc14a5af2c01911173f972ce4cf3df04f5260f582a815134a0c226dc7d05eb69f8feaa67f25ba0f65937bc0b33b3a030fa7c57dfb961
- SSDEEP 6144:J4ZaN1cb90oOTFmIFLq0cvnXhLCqj2EFNirGcEOkCybEaQRuy8K:JrNOb9+sIF+0cvnXhLCqEsOkxHy
- TLSH T110C48D29B6E0C076C4B79578C4A186B6FAB17832372459CFA394075A1F337E2BA3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory