General

  • Target
    2026-07-27_02b781fce639aeab49d646426fc0e428_amadey_coinminer_elex_smoke-loader_stop
  • Size 615KB
  • Sample260727-krbjsazapb
  • SHA256 fe2dd5161d8ef23f7072201543e4b850657886cb8be24bb6748359f8c8d0e63e
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-07-27_02b781fce639aeab49d646426fc0e428_amadey_coinminer_elex_smoke-loader_stop
    • Size 615KB
    • SHA256 fe2dd5161d8ef23f7072201543e4b850657886cb8be24bb6748359f8c8d0e63e
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Executes dropped EXE

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v16

Tasks