General
- Target 2026-07-18_08b49bc66700f64c2a6391ac042bd74a_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- Sample260718-w2vaeshz8r
- SHA256 6218caa43d54a64fd4b7472fdd70a6d79570b73260870646d30e84e8cc800c52
- MD5 08b49bc66700f64c2a6391ac042bd74a
- SHA1 e95ce685b7b4787e3b1ebf2aff2d5a9071fd6795
- SHA512 1ac47efa44d84d675384a9e4288f9e6679e62f0d566b81604f72aaebd65f1b889eafbd8fa9fc06f22f52c56a4b58aed73278e0ae0ae5d60588dcde4b8ee404c5
- SSDEEP 6144:p6UE71cqQEoMr5C2iKLJChYSvL+8xPFxirGcEOkCybEaQRXr9HNdvOa+y8K:pO7OqQs42iKFChYSvL+8AsOkx2LIa+y
- TLSH T137C46C26B6A0D076C4B79574C4A28BA6FFB1742227244BCFA39047561F637E2BE3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-18_08b49bc66700f64c2a6391ac042bd74a_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-18_08b49bc66700f64c2a6391ac042bd74a_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- SHA256 6218caa43d54a64fd4b7472fdd70a6d79570b73260870646d30e84e8cc800c52
- MD5 08b49bc66700f64c2a6391ac042bd74a
- SHA1 e95ce685b7b4787e3b1ebf2aff2d5a9071fd6795
- SHA512 1ac47efa44d84d675384a9e4288f9e6679e62f0d566b81604f72aaebd65f1b889eafbd8fa9fc06f22f52c56a4b58aed73278e0ae0ae5d60588dcde4b8ee404c5
- SSDEEP 6144:p6UE71cqQEoMr5C2iKLJChYSvL+8xPFxirGcEOkCybEaQRXr9HNdvOa+y8K:pO7OqQs42iKFChYSvL+8AsOkx2LIa+y
- TLSH T137C46C26B6A0D076C4B79574C4A28BA6FFB1742227244BCFA39047561F637E2BE3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory