General
- Target 2026-07-23_2928e99115086ea04c60c84aa6bb7449_amadey_coinminer_elex_smoke-loader_stop
- Size 576KB
- Sample260723-q85f3sysdx
- SHA256 1dbf57241d20dce2dca38f471752722577032744929c47cad0ee77c20e2e99d3
- MD5 2928e99115086ea04c60c84aa6bb7449
- SHA1 b63109ecb3a2277a0b8324b563bafafc97d7a776
- SHA512 f1298f3362a5814f03a5f3b4804cbe34211a2826716e402cb040326694b85c2ef6636ac747ec9d96a8e742407e3261a17b3918f72b505e05247218f0426863f5
- SSDEEP 6144:ycTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K/:ySvO2x9mONvKRwLSFtsOkx2LIa+yx
- TLSH T1FEC46D26B6908072C4779578C4A257AAFBB1BC2127204ACFA390775A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-23_2928e99115086ea04c60c84aa6bb7449_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-23_2928e99115086ea04c60c84aa6bb7449_amadey_coinminer_elex_smoke-loader_stop
- Size 576KB
- SHA256 1dbf57241d20dce2dca38f471752722577032744929c47cad0ee77c20e2e99d3
- MD5 2928e99115086ea04c60c84aa6bb7449
- SHA1 b63109ecb3a2277a0b8324b563bafafc97d7a776
- SHA512 f1298f3362a5814f03a5f3b4804cbe34211a2826716e402cb040326694b85c2ef6636ac747ec9d96a8e742407e3261a17b3918f72b505e05247218f0426863f5
- SSDEEP 6144:ycTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K/:ySvO2x9mONvKRwLSFtsOkx2LIa+yx
- TLSH T1FEC46D26B6908072C4779578C4A257AAFBB1BC2127204ACFA390775A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory