General
- Target 2026-07-19_88bc8a1c0e64459594ea2a5594a54ffc_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- Sample260719-dpcwhaav6q
- SHA256 ee9dd6509bdedb4236f43e26a7d4a17ee162df2761929b0e1c83a64ec2f96793
- MD5 88bc8a1c0e64459594ea2a5594a54ffc
- SHA1 cd243ce306ca099a673a13207802c5e1be62cfac
- SHA512 d6d2b744278343b96db7b5a37c9d8769d6b3b0474e5f4aad748982befe6c00c2f8419814e22dabd77e67b5535cd854b5aa0239af178bfc61a870c013e0806627
- SSDEEP 6144:eWVrC1c2oonALgPLj7vf1LKlyIFVirGcEOkCybEaQRXr9HNdvOa+y8K:ekCO2zVPX7vf1LKlIsOkx2LIa+y
- TLSH T104C47C2AF6A0C036C4779574C4A257AAFFB1B42127204ACFA390475A1F637E2BE7531D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-19_88bc8a1c0e64459594ea2a5594a54ffc_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-19_88bc8a1c0e64459594ea2a5594a54ffc_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- SHA256 ee9dd6509bdedb4236f43e26a7d4a17ee162df2761929b0e1c83a64ec2f96793
- MD5 88bc8a1c0e64459594ea2a5594a54ffc
- SHA1 cd243ce306ca099a673a13207802c5e1be62cfac
- SHA512 d6d2b744278343b96db7b5a37c9d8769d6b3b0474e5f4aad748982befe6c00c2f8419814e22dabd77e67b5535cd854b5aa0239af178bfc61a870c013e0806627
- SSDEEP 6144:eWVrC1c2oonALgPLj7vf1LKlyIFVirGcEOkCybEaQRXr9HNdvOa+y8K:ekCO2zVPX7vf1LKlIsOkx2LIa+y
- TLSH T104C47C2AF6A0C036C4779574C4A257AAFFB1B42127204ACFA390475A1F637E2BE7531D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory