General
- Target 2026-07-17_05845701904f7fb6a629e3dcb1661fd9_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- Sample260718-abftfshx8l
- SHA256 cc10a6eff304b83f7c6ff6d9d7949e4dc530e43fba95bd4f084d050930908d0d
- MD5 05845701904f7fb6a629e3dcb1661fd9
- SHA1 970a8869b7aab34c2c5fc1b6bf3367b30de489bb
- SHA512 6ffe7f5f2cea054d247f34701c88b6017a01d8f378933ab242f9db2e307112d8a99d11ab1bc708e015857a7aeb25cd9130adb6c5bd195e2d357624993842ea0e
- SSDEEP 6144:84ZaN1cb90oOTFmIFLq0cvnXhLCqj2EFNirGcEOkCybEaQRuy8K:8rNOb9+sIF+0cvnXhLCqEsOkxHy
- TLSH T1E9C48D29B6E0C076C4B79578C4A186B6FAB17832372459CFA394075A1F337E2BA3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-17_05845701904f7fb6a629e3dcb1661fd9_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-17_05845701904f7fb6a629e3dcb1661fd9_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- SHA256 cc10a6eff304b83f7c6ff6d9d7949e4dc530e43fba95bd4f084d050930908d0d
- MD5 05845701904f7fb6a629e3dcb1661fd9
- SHA1 970a8869b7aab34c2c5fc1b6bf3367b30de489bb
- SHA512 6ffe7f5f2cea054d247f34701c88b6017a01d8f378933ab242f9db2e307112d8a99d11ab1bc708e015857a7aeb25cd9130adb6c5bd195e2d357624993842ea0e
- SSDEEP 6144:84ZaN1cb90oOTFmIFLq0cvnXhLCqj2EFNirGcEOkCybEaQRuy8K:8rNOb9+sIF+0cvnXhLCqEsOkxHy
- TLSH T1E9C48D29B6E0C076C4B79578C4A186B6FAB17832372459CFA394075A1F337E2BA3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory