General
- Target 2026-07-22_aabc5d64c94f34c4af974f9641ad7bca_amadey_coinminer_elex_smoke-loader_stop
- Size 511KB
- Sample260722-13fwms1yet
- SHA256 7d28205579f5237a21660843a31012e5b7c1252db828f40c79eae01f04143351
- MD5 aabc5d64c94f34c4af974f9641ad7bca
- SHA1 31f847cda3f95311674c2a65860449116085bfce
- SHA512 cbd0b91926c08e25e1634b97a5d1d1559cd4192a354806c69a92435367fa1196b70a51a41024607a3380c6930328fe61c3bbaac1582ca85c1c41f968449ce523
- SSDEEP 6144:ycTgav1cdCTuoPbgwmOLJvKRILSFvdFDcEOkCybEaQRXr9HNdvOax5Rv0:ySvO2x9mONvKRILSFnOkx2LIax5F0
- TLSH T1ECB45C26F6908036C4B34575C5F64BAAFAB4BC21631156CBA3943A6A1F737D2BD3130E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-22_aabc5d64c94f34c4af974f9641ad7bca_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-22_aabc5d64c94f34c4af974f9641ad7bca_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-22_aabc5d64c94f34c4af974f9641ad7bca_amadey_coinminer_elex_smoke-loader_stop
- Size 511KB
- SHA256 7d28205579f5237a21660843a31012e5b7c1252db828f40c79eae01f04143351
- MD5 aabc5d64c94f34c4af974f9641ad7bca
- SHA1 31f847cda3f95311674c2a65860449116085bfce
- SHA512 cbd0b91926c08e25e1634b97a5d1d1559cd4192a354806c69a92435367fa1196b70a51a41024607a3380c6930328fe61c3bbaac1582ca85c1c41f968449ce523
- SSDEEP 6144:ycTgav1cdCTuoPbgwmOLJvKRILSFvdFDcEOkCybEaQRXr9HNdvOax5Rv0:ySvO2x9mONvKRILSFnOkx2LIax5F0
- TLSH T1ECB45C26F6908036C4B34575C5F64BAAFAB4BC21631156CBA3943A6A1F737D2BD3130E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory