General
- Target 2026-07-19_65970412dc9edec71c975f7c79b5885e_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- Sample260720-bsmtrsbv2m
- SHA256 18ad92a58a439523658110070e89d1166b2f08661e710ef769ff9981a988042f
- MD5 65970412dc9edec71c975f7c79b5885e
- SHA1 bdf79b063e07da9a09ac5d04545e407479d02c6e
- SHA512 5df3f475a6a4b31a09e35f75db0f5e1e2b5301062e037c22c69214a1218d56a57f7fbb1c9c38ea36d193e0dbd6245a0016e82acb42cf8ca9300cd13daad7de3c
- SSDEEP 6144:ZcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:ZSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T12AD45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-19_65970412dc9edec71c975f7c79b5885e_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-19_65970412dc9edec71c975f7c79b5885e_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-19_65970412dc9edec71c975f7c79b5885e_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- SHA256 18ad92a58a439523658110070e89d1166b2f08661e710ef769ff9981a988042f
- MD5 65970412dc9edec71c975f7c79b5885e
- SHA1 bdf79b063e07da9a09ac5d04545e407479d02c6e
- SHA512 5df3f475a6a4b31a09e35f75db0f5e1e2b5301062e037c22c69214a1218d56a57f7fbb1c9c38ea36d193e0dbd6245a0016e82acb42cf8ca9300cd13daad7de3c
- SSDEEP 6144:ZcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:ZSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T12AD45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory