General
- Target 2026-07-27_d9759f0454be31a3ced9756fcaf154ee_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- Sample260727-bql5fstfkf
- SHA256 3a4fe1f4daaa7986ecf2030be7062ecac23b31520b262d27eb2ab8ad46363d31
- MD5 d9759f0454be31a3ced9756fcaf154ee
- SHA1 a0ce7d4fc353e055fd4fc2ecac318e611b26af5b
- SHA512 3f5a295f378234d37a0d878091f1ec4e42b0885cbfd6255dc6253cfd8847fce16a7bbdd97a97fa63fce090d8253aeec129e34f193d60c066df7b02388b59d46c
- SSDEEP 6144:DWVrC1c2oonALgPLj7vf1LKlyIFVirGcEOkCybEaQRuy8K:DkCO2zVPX7vf1LKlIsOkxHy
- TLSH T187C47C29B690D076C4779574C4A187AAFAB1B432372449CFB3D00B5A1F237E2BA7530E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-27_d9759f0454be31a3ced9756fcaf154ee_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-27_d9759f0454be31a3ced9756fcaf154ee_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- SHA256 3a4fe1f4daaa7986ecf2030be7062ecac23b31520b262d27eb2ab8ad46363d31
- MD5 d9759f0454be31a3ced9756fcaf154ee
- SHA1 a0ce7d4fc353e055fd4fc2ecac318e611b26af5b
- SHA512 3f5a295f378234d37a0d878091f1ec4e42b0885cbfd6255dc6253cfd8847fce16a7bbdd97a97fa63fce090d8253aeec129e34f193d60c066df7b02388b59d46c
- SSDEEP 6144:DWVrC1c2oonALgPLj7vf1LKlyIFVirGcEOkCybEaQRuy8K:DkCO2zVPX7vf1LKlIsOkxHy
- TLSH T187C47C29B690D076C4779574C4A187AAFAB1B432372449CFB3D00B5A1F237E2BA7530E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory