General
- Target 2026-07-19_53e48f6e26ac2c5ac5063ccdaf72e531_amadey_coinminer_elex_smoke-loader_stop
- Size 525KB
- Sample260719-pl4etsa18q
- SHA256 8b5a91236754cfe8c65fcb37e9e5c71a04aed4b16af55cb9326a5102e8183644
- MD5 53e48f6e26ac2c5ac5063ccdaf72e531
- SHA1 74be123eeda424f02519c58bcec99e60a208f3d8
- SHA512 9860ffef9b9f951fe9bdd0db887698f5d688ffb00a6e31830617d771c758c808ab66cfe524d1a8d9406a1447b835c904c5a6bcff3551cd4f403f0157d2ba5abd
- SSDEEP 6144:UcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K:USvO2x9mONvKRwLSFtsOkx2LIa+y
- TLSH T1E4B47D2AB6A0D076C4779579C4A257BAFBB1742137204ACFA390475A1F237E2BE3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-19_53e48f6e26ac2c5ac5063ccdaf72e531_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-19_53e48f6e26ac2c5ac5063ccdaf72e531_amadey_coinminer_elex_smoke-loader_stop
- Size 525KB
- SHA256 8b5a91236754cfe8c65fcb37e9e5c71a04aed4b16af55cb9326a5102e8183644
- MD5 53e48f6e26ac2c5ac5063ccdaf72e531
- SHA1 74be123eeda424f02519c58bcec99e60a208f3d8
- SHA512 9860ffef9b9f951fe9bdd0db887698f5d688ffb00a6e31830617d771c758c808ab66cfe524d1a8d9406a1447b835c904c5a6bcff3551cd4f403f0157d2ba5abd
- SSDEEP 6144:UcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K:USvO2x9mONvKRwLSFtsOkx2LIa+y
- TLSH T1E4B47D2AB6A0D076C4779579C4A257BAFBB1742137204ACFA390475A1F237E2BE3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory