General
- Target 2026-07-21_ee9e96ed7ccacb25f239f962d87ff823_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- Sample260721-eadpxsft4s
- SHA256 c9b337b5a274ad200b52681920bb847cb853dc9ed766e88c16386d93ade65639
- MD5 ee9e96ed7ccacb25f239f962d87ff823
- SHA1 de045312a1f30d457d48db825b9a7acf2daf965f
- SHA512 29cdb49226942f13ad40ee89012d5b08645901748ec5971c20397b18e43dd01d8037acccce6991c9ee341054b5ed6b4ef38149dca3c1017e4d03dfb02ef7b019
- SSDEEP 6144:0WVrC1c2oonALgPLj7vf1LKlyIFVirGcEOkCybEaQRuy8K:0kCO2zVPX7vf1LKlIsOkxHy
- TLSH T191C47C29B690D076C4779574C4A187AAFAB1B432372449CFB3D00B5A1F237E2BA7530E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-21_ee9e96ed7ccacb25f239f962d87ff823_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-21_ee9e96ed7ccacb25f239f962d87ff823_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- SHA256 c9b337b5a274ad200b52681920bb847cb853dc9ed766e88c16386d93ade65639
- MD5 ee9e96ed7ccacb25f239f962d87ff823
- SHA1 de045312a1f30d457d48db825b9a7acf2daf965f
- SHA512 29cdb49226942f13ad40ee89012d5b08645901748ec5971c20397b18e43dd01d8037acccce6991c9ee341054b5ed6b4ef38149dca3c1017e4d03dfb02ef7b019
- SSDEEP 6144:0WVrC1c2oonALgPLj7vf1LKlyIFVirGcEOkCybEaQRuy8K:0kCO2zVPX7vf1LKlIsOkxHy
- TLSH T191C47C29B690D076C4779574C4A187AAFAB1B432372449CFB3D00B5A1F237E2BA7530E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory