General
- Target 2026-07-17_2e8348b24ee64f192d2ccc77508482be_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- Sample260717-hdsvssds3l
- SHA256 44df64d930547b54abb9da3f3f2d0f5684afa5c320ca1919aefc7f5488b0b669
- MD5 2e8348b24ee64f192d2ccc77508482be
- SHA1 fde4ea2b77ebab7d119706275fabbfa708115c52
- SHA512 4fcd83db177723f0c3fc6c4031f9a7ec23db830b4c194bae753fea2fce0647e40d8462befd7def89981e3f5865400d7896a3c3fa9589a21c6d0dafb6c5f0d0a2
- SSDEEP 6144:TcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:TSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T1F0D45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-17_2e8348b24ee64f192d2ccc77508482be_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-17_2e8348b24ee64f192d2ccc77508482be_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- SHA256 44df64d930547b54abb9da3f3f2d0f5684afa5c320ca1919aefc7f5488b0b669
- MD5 2e8348b24ee64f192d2ccc77508482be
- SHA1 fde4ea2b77ebab7d119706275fabbfa708115c52
- SHA512 4fcd83db177723f0c3fc6c4031f9a7ec23db830b4c194bae753fea2fce0647e40d8462befd7def89981e3f5865400d7896a3c3fa9589a21c6d0dafb6c5f0d0a2
- SSDEEP 6144:TcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:TSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T1F0D45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory