General
- Target 2026-07-20_aa79ac11a075a69def0c03d89bcb06db_amadey_coinminer_elex_smoke-loader_stop
- Size 576KB
- Sample260720-k11v2acv6q
- SHA256 4cb8140cdd844969ffd84fac58958bbed894be79cf1de55de8428e7d09823208
- MD5 aa79ac11a075a69def0c03d89bcb06db
- SHA1 3bbdfb810c5c43418afafc547a9fd95c696b7067
- SHA512 075819e628ca5a17db4ca6bb6f6ccf8ccb6dbc990b36ba84107e4f997066fcc0727c1eb8cbb81b40c942a3b672c7ee48f5eada2a03bfe21e74b9019371b1a653
- SSDEEP 6144:ScTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K/:SSvO2x9mONvKRwLSFtsOkx2LIa+yx
- TLSH T1CAC46D26B6908072C4779578C4A257AAFBB1BC2127204ACFA390775A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-20_aa79ac11a075a69def0c03d89bcb06db_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_aa79ac11a075a69def0c03d89bcb06db_amadey_coinminer_elex_smoke-loader_stop
- Size 576KB
- SHA256 4cb8140cdd844969ffd84fac58958bbed894be79cf1de55de8428e7d09823208
- MD5 aa79ac11a075a69def0c03d89bcb06db
- SHA1 3bbdfb810c5c43418afafc547a9fd95c696b7067
- SHA512 075819e628ca5a17db4ca6bb6f6ccf8ccb6dbc990b36ba84107e4f997066fcc0727c1eb8cbb81b40c942a3b672c7ee48f5eada2a03bfe21e74b9019371b1a653
- SSDEEP 6144:ScTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K/:SSvO2x9mONvKRwLSFtsOkx2LIa+yx
- TLSH T1CAC46D26B6908072C4779578C4A257AAFBB1BC2127204ACFA390775A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Custom signature
UPX dump on OEP (original entry point)
Executes dropped EXE
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
Drops file in System32 directory