General
- Target 2026-07-27_f63ee60580f28e5a30f2aabfc3da64b9_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- Sample260727-grsarahn7x
- SHA256 21b364036f2cc13a076986f1e6f710acbe8817c0585e464fd45025b89d202012
- MD5 f63ee60580f28e5a30f2aabfc3da64b9
- SHA1 5f42dbd37bc68771bb88c901c04b922a09c50ff1
- SHA512 ff4cc4e9188067c1c997f62d029078f5b66f35bc5c98f9ca2f8d56fffe04aa58eef7a6efe824d7fbed1053f37d19594ff32655160156b47e240e948c3d31fccf
- SSDEEP 6144:RcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:RSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T14FD45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-27_f63ee60580f28e5a30f2aabfc3da64b9_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-27_f63ee60580f28e5a30f2aabfc3da64b9_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- SHA256 21b364036f2cc13a076986f1e6f710acbe8817c0585e464fd45025b89d202012
- MD5 f63ee60580f28e5a30f2aabfc3da64b9
- SHA1 5f42dbd37bc68771bb88c901c04b922a09c50ff1
- SHA512 ff4cc4e9188067c1c997f62d029078f5b66f35bc5c98f9ca2f8d56fffe04aa58eef7a6efe824d7fbed1053f37d19594ff32655160156b47e240e948c3d31fccf
- SSDEEP 6144:RcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:RSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T14FD45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory