General
- Target 2026-07-27_e8e7ae175052f11184d0d0caf991f783_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- Sample260727-bqbcysfp2w
- SHA256 fc46175faeba24a1c8ed8cb0ada7caf8873cd693945559c6eb316ffbefaf4e99
- MD5 e8e7ae175052f11184d0d0caf991f783
- SHA1 eb4a711e5cf8c498e419504b42af2931d383624b
- SHA512 850b864192fc63c2194623738547bcaa229d66cc2cd833b79e82f1d48008d50b275c035d84e4100e302e3d98ed05a3d2b678d5d9db9fc67cc3b375f6116ea69e
- SSDEEP 6144:OWVrC1c2oonALgPLj7vf1LKlyIFVirGcEOkCybEaQRuy8K:OkCO2zVPX7vf1LKlIsOkxHy
- TLSH T1B1C47C29B690D076C4779574C4A197AAFAB1B432372449CFB3D00B5A1F237E2BA7530E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-27_e8e7ae175052f11184d0d0caf991f783_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-27_e8e7ae175052f11184d0d0caf991f783_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- SHA256 fc46175faeba24a1c8ed8cb0ada7caf8873cd693945559c6eb316ffbefaf4e99
- MD5 e8e7ae175052f11184d0d0caf991f783
- SHA1 eb4a711e5cf8c498e419504b42af2931d383624b
- SHA512 850b864192fc63c2194623738547bcaa229d66cc2cd833b79e82f1d48008d50b275c035d84e4100e302e3d98ed05a3d2b678d5d9db9fc67cc3b375f6116ea69e
- SSDEEP 6144:OWVrC1c2oonALgPLj7vf1LKlyIFVirGcEOkCybEaQRuy8K:OkCO2zVPX7vf1LKlIsOkxHy
- TLSH T1B1C47C29B690D076C4779574C4A197AAFAB1B432372449CFB3D00B5A1F237E2BA7530E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory