General
- Target 2026-07-17_369f7b2e9583980f854cf5bc22bb1e23_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- Sample260718-ewq75sbs91
- SHA256 2caa78e95fcfefb52498e2c65f9436e895e2cf2176e3c3770b912db13142c4de
- MD5 369f7b2e9583980f854cf5bc22bb1e23
- SHA1 589da15493fe517b11f71f2339bb473a7bafbac1
- SHA512 008196704f95f6c0783354f2693a7047b596cdc861e03d5a8daae49818aee5d2a997554840349e8273d03b0e762e075eac1f9389308ca877bb248bba07cd4ab4
- SSDEEP 6144:c4ZaN1cb90oOTFmIFLq0cvnXhLCqj2EFNirGcEOkCybEaQRuy8K:crNOb9+sIF+0cvnXhLCqEsOkxHy
- TLSH T1AFC48D29B6E0C076C4B79578C4A186B6FAB17832372459CFA394075A1F337E2BA3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-17_369f7b2e9583980f854cf5bc22bb1e23_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-17_369f7b2e9583980f854cf5bc22bb1e23_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- SHA256 2caa78e95fcfefb52498e2c65f9436e895e2cf2176e3c3770b912db13142c4de
- MD5 369f7b2e9583980f854cf5bc22bb1e23
- SHA1 589da15493fe517b11f71f2339bb473a7bafbac1
- SHA512 008196704f95f6c0783354f2693a7047b596cdc861e03d5a8daae49818aee5d2a997554840349e8273d03b0e762e075eac1f9389308ca877bb248bba07cd4ab4
- SSDEEP 6144:c4ZaN1cb90oOTFmIFLq0cvnXhLCqj2EFNirGcEOkCybEaQRuy8K:crNOb9+sIF+0cvnXhLCqEsOkxHy
- TLSH T1AFC48D29B6E0C076C4B79578C4A186B6FAB17832372459CFA394075A1F337E2BA3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Custom signature
UPX dump on OEP (original entry point)
Executes dropped EXE
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
Drops file in System32 directory