General
- Target 2026-07-17_8359b1465877c0fdf85741094c5ee8e6_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- Sample260718-dmtfgahy41
- SHA256 f7bbc2190f7a9459ae85cd4af3cdff3022e44463bfdb8f188708430a681ff1ec
- MD5 8359b1465877c0fdf85741094c5ee8e6
- SHA1 79bde1905d753b690f27666dbb01f3bc15f2aeaf
- SHA512 3513a1785aebc726e1388afd08373fa6b280a69d8ec2940299fc0709964384e913b602a10570a5fa1246a4cbb84132da77fcbe2153299f05a4624d3a0528b91e
- SSDEEP 6144:Kgye71cE4poJTqvpQLXNKFyLWD1nFairGcEOkCybEaQRuy8K:KI7OE4kopQzNKFyLWDHsOkxHy
- TLSH T197C48C2AB690C076C4B7D534C5E197AAEAB17432372449CFA3D0075A1F237E2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-17_8359b1465877c0fdf85741094c5ee8e6_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-17_8359b1465877c0fdf85741094c5ee8e6_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- SHA256 f7bbc2190f7a9459ae85cd4af3cdff3022e44463bfdb8f188708430a681ff1ec
- MD5 8359b1465877c0fdf85741094c5ee8e6
- SHA1 79bde1905d753b690f27666dbb01f3bc15f2aeaf
- SHA512 3513a1785aebc726e1388afd08373fa6b280a69d8ec2940299fc0709964384e913b602a10570a5fa1246a4cbb84132da77fcbe2153299f05a4624d3a0528b91e
- SSDEEP 6144:Kgye71cE4poJTqvpQLXNKFyLWD1nFairGcEOkCybEaQRuy8K:KI7OE4kopQzNKFyLWDHsOkxHy
- TLSH T197C48C2AB690C076C4B7D534C5E197AAEAB17432372449CFA3D0075A1F237E2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory