General
- Target 2026-07-23_263d1f8a6b9adf4a15a893733e118ccc_amadey_coinminer_elex_smoke-loader_stop
- Size 615KB
- Sample260723-q9csfsysfs
- SHA256 ae0a37f1862343d30c0b0ab39642adeb6211e911ded48d9e3b497565742ac07a
- MD5 263d1f8a6b9adf4a15a893733e118ccc
- SHA1 f150bd5a38c7d0a2232bfd8a8f9e100bef0b6fad
- SHA512 6f77057d14a63f78b44cabea43ae62e2c54b229925bfbd582ca6e6dbc90f935fce93645c44ac977a24b250de7a531df226c5f365e307ccb6e83b7982a1fe7e29
- SSDEEP 12288:oSvO2x9mONvKRILSFnOkx2LIax5FAQjU/Liw:jvO2xJKRI2FOkx2LFicUV
- TLSH T1D5D44A31E241C03AD4A74576C6FA0BAFE5647D25531165CBA3C43A2A2FB36D2BE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-23_263d1f8a6b9adf4a15a893733e118ccc_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-23_263d1f8a6b9adf4a15a893733e118ccc_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-23_263d1f8a6b9adf4a15a893733e118ccc_amadey_coinminer_elex_smoke-loader_stop
- Size 615KB
- SHA256 ae0a37f1862343d30c0b0ab39642adeb6211e911ded48d9e3b497565742ac07a
- MD5 263d1f8a6b9adf4a15a893733e118ccc
- SHA1 f150bd5a38c7d0a2232bfd8a8f9e100bef0b6fad
- SHA512 6f77057d14a63f78b44cabea43ae62e2c54b229925bfbd582ca6e6dbc90f935fce93645c44ac977a24b250de7a531df226c5f365e307ccb6e83b7982a1fe7e29
- SSDEEP 12288:oSvO2x9mONvKRILSFnOkx2LIax5FAQjU/Liw:jvO2xJKRI2FOkx2LFicUV
- TLSH T1D5D44A31E241C03AD4A74576C6FA0BAFE5647D25531165CBA3C43A2A2FB36D2BE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory