General
- Target 2026-07-27_eef7a23373575e41a2b5d8602277968a_amadey_coinminer_elex_smoke-loader_stop
- Size 761KB
- Sample260727-gssb5sweqf
- SHA256 20180335e24a0ee4aa58e358e825df9859c0ff5bcf89cd46159a3bf265a7af31
- MD5 eef7a23373575e41a2b5d8602277968a
- SHA1 05694dd2dfe1ce893010b78d330316c8a1a3fa51
- SHA512 85796c0d2aa02181b11874725d5f913052b43139cb3fc952aa400fe282aacffcbefb9bc2844738ab3283c48eee05233ae1652bec6d739241d3b47637f137159f
- SSDEEP 12288:SSvO2x9mONvKRwLSFtsOkxHya5hYIW0p98B:5vO2xJKRw2kOkxSkW298B
- TLSH T143F49E35A2808036C0B34532C6F94AABF9797D35631565CBA3843B662F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-27_eef7a23373575e41a2b5d8602277968a_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-27_eef7a23373575e41a2b5d8602277968a_amadey_coinminer_elex_smoke-loader_stop
- Size 761KB
- SHA256 20180335e24a0ee4aa58e358e825df9859c0ff5bcf89cd46159a3bf265a7af31
- MD5 eef7a23373575e41a2b5d8602277968a
- SHA1 05694dd2dfe1ce893010b78d330316c8a1a3fa51
- SHA512 85796c0d2aa02181b11874725d5f913052b43139cb3fc952aa400fe282aacffcbefb9bc2844738ab3283c48eee05233ae1652bec6d739241d3b47637f137159f
- SSDEEP 12288:SSvO2x9mONvKRwLSFtsOkxHya5hYIW0p98B:5vO2xJKRw2kOkxSkW298B
- TLSH T143F49E35A2808036C0B34532C6F94AABF9797D35631565CBA3843B662F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory