General
- Target 2026-07-20_f82b89af8de64f747c226877f11246d9_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- Sample260720-ctr1jse16v
- SHA256 fe961c9f217a286d8e05c9f21001aa359d3a78f9ba17390e7ece0ef49d3c625e
- MD5 f82b89af8de64f747c226877f11246d9
- SHA1 2cda29889d5eefd823b3e77fa4710467214aaa67
- SHA512 ff8ea684138ab3446bcd36aa57c58e48d8434225fcc55540fcdaf5a632e6bb255069279e106c07af96732d82fa59dae554404161a01639e7dd14f1b5eb72be4e
- SSDEEP 6144:2cTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:2SvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T16ED45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-20_f82b89af8de64f747c226877f11246d9_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_f82b89af8de64f747c226877f11246d9_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- SHA256 fe961c9f217a286d8e05c9f21001aa359d3a78f9ba17390e7ece0ef49d3c625e
- MD5 f82b89af8de64f747c226877f11246d9
- SHA1 2cda29889d5eefd823b3e77fa4710467214aaa67
- SHA512 ff8ea684138ab3446bcd36aa57c58e48d8434225fcc55540fcdaf5a632e6bb255069279e106c07af96732d82fa59dae554404161a01639e7dd14f1b5eb72be4e
- SSDEEP 6144:2cTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:2SvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T16ED45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory