General
- Target 2026-07-20_20f28996d4d0cd6268b5bf61f608befb_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- Sample260720-dzm48ady8r
- SHA256 7ce13f4099113d13f1efb8abe5c4e5ddac848d78d475bf80f564b1119f31a4b2
- MD5 20f28996d4d0cd6268b5bf61f608befb
- SHA1 bc981b442c2a3f17da93c35194c92cd25bc06553
- SHA512 37eb049fca050ba514937e40c47ff8f474ec9d7d3da0caf7fb2f91d66149cca94ce9477008a43d17381d8784c0a16131d110c73438b34ef93c8a9dbdb11de5d1
- SSDEEP 6144:O4ZaN1cb90oOTFmIFLq0cvnXhLCqj2EFNirGcEOkCybEaQRuy8K:OrNOb9+sIF+0cvnXhLCqEsOkxHy
- TLSH T118C48D29B6E0C076C4B79578C4A186B6FAB17832372459CFA394075A1F337E2BA3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-20_20f28996d4d0cd6268b5bf61f608befb_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_20f28996d4d0cd6268b5bf61f608befb_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- SHA256 7ce13f4099113d13f1efb8abe5c4e5ddac848d78d475bf80f564b1119f31a4b2
- MD5 20f28996d4d0cd6268b5bf61f608befb
- SHA1 bc981b442c2a3f17da93c35194c92cd25bc06553
- SHA512 37eb049fca050ba514937e40c47ff8f474ec9d7d3da0caf7fb2f91d66149cca94ce9477008a43d17381d8784c0a16131d110c73438b34ef93c8a9dbdb11de5d1
- SSDEEP 6144:O4ZaN1cb90oOTFmIFLq0cvnXhLCqj2EFNirGcEOkCybEaQRuy8K:OrNOb9+sIF+0cvnXhLCqEsOkxHy
- TLSH T118C48D29B6E0C076C4B79578C4A186B6FAB17832372459CFA394075A1F337E2BA3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory