General
- Target 2026-07-27_28d16ef9e85cbe77b1b2b1f9c433628a_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- Sample260727-kkdqkaab46
- SHA256 bff6f23e7df57fed9d7b3f5fc573adfe9131c32f0a183ec5ae12c140eeebf3ae
- MD5 28d16ef9e85cbe77b1b2b1f9c433628a
- SHA1 f74b565e5d4da8b15036116100810029fc311f5c
- SHA512 034b57c8f606853a7283658651fd25df456c4ab166f8fad93486d7d7fd99f8baf7439671f3fad8e69a894f1a6f56ff028ed1723a69b7391317fa92ba710a8457
- SSDEEP 6144:DUJJuV1cdhIoA7vJ0CLoCgvDLe4AmFvirGcEOkCybEaQRuy8K:DYsVOdhElvkCgvDLe4usOkxHy
- TLSH T118C48D29B6D0C036C5B39574C4A186BAEAB17432372549CFA3D5475A0F337E2BA7930E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-27_28d16ef9e85cbe77b1b2b1f9c433628a_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-27_28d16ef9e85cbe77b1b2b1f9c433628a_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- SHA256 bff6f23e7df57fed9d7b3f5fc573adfe9131c32f0a183ec5ae12c140eeebf3ae
- MD5 28d16ef9e85cbe77b1b2b1f9c433628a
- SHA1 f74b565e5d4da8b15036116100810029fc311f5c
- SHA512 034b57c8f606853a7283658651fd25df456c4ab166f8fad93486d7d7fd99f8baf7439671f3fad8e69a894f1a6f56ff028ed1723a69b7391317fa92ba710a8457
- SSDEEP 6144:DUJJuV1cdhIoA7vJ0CLoCgvDLe4AmFvirGcEOkCybEaQRuy8K:DYsVOdhElvkCgvDLe4usOkxHy
- TLSH T118C48D29B6D0C036C5B39574C4A186BAEAB17432372549CFA3D5475A0F337E2BA7930E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory