General
- Target 2026-07-20_e2afa061ae91ccc77d3fe9af759ab1ed_amadey_coinminer_elex_smoke-loader_stop
- Size 395KB
- Sample260720-m8jb3afy5p
- SHA256 b10e4e0b8d926bf385c18c7d5cec16193be34387fec2c67cf517e755de6ef93c
- MD5 e2afa061ae91ccc77d3fe9af759ab1ed
- SHA1 f56fd08cc0f116fcf6734ec448f743a12ac4df54
- SHA512 40a3c2a3e8ecfd8ff85aa39e1e815b62569d02b885146d213fed5fc222dab1e054e35997699d14760a73ec262360ce58a53b1ad7fdac612ecf4df888f3898e2d
- SSDEEP 6144:jcbcTgav1cdCTuoPbgwmOLJvKRILSFvdFDcEOkCybEaQRXr9HNdvOa:jCSvO2x9mONvKRILSFnOkx2LIa
- TLSH T14B846D2AB6A0D076C4B79579C4A247BAFBB1742137204ACFA390475A1F637E2BD3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_e2afa061ae91ccc77d3fe9af759ab1ed_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_e2afa061ae91ccc77d3fe9af759ab1ed_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_e2afa061ae91ccc77d3fe9af759ab1ed_amadey_coinminer_elex_smoke-loader_stop
- Size 395KB
- SHA256 b10e4e0b8d926bf385c18c7d5cec16193be34387fec2c67cf517e755de6ef93c
- MD5 e2afa061ae91ccc77d3fe9af759ab1ed
- SHA1 f56fd08cc0f116fcf6734ec448f743a12ac4df54
- SHA512 40a3c2a3e8ecfd8ff85aa39e1e815b62569d02b885146d213fed5fc222dab1e054e35997699d14760a73ec262360ce58a53b1ad7fdac612ecf4df888f3898e2d
- SSDEEP 6144:jcbcTgav1cdCTuoPbgwmOLJvKRILSFvdFDcEOkCybEaQRXr9HNdvOa:jCSvO2x9mONvKRILSFnOkx2LIa
- TLSH T14B846D2AB6A0D076C4B79579C4A247BAFBB1742137204ACFA390475A1F637E2BD3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory