General
- Target 2026-07-27_2f1b06cca6a6ecf6fa0798e7a3e18400_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- Sample260727-nmzbtsdp81
- SHA256 c01c091dfa9e1867c3d1f7ddc097d9da607a5f7c2e8a5ffc88ebf5187c200746
- MD5 2f1b06cca6a6ecf6fa0798e7a3e18400
- SHA1 efa66a6309cb93a8d310f75a6f7b2bf508b95b87
- SHA512 24aaba2499f16c3a11e8c4b45d94e02bcdd51a67b7a0bfd754e0f207a68df8d8c364478807f010ed3a43d43ae68ab81d375b4b6b44032b247aabd20aef791533
- SSDEEP 6144:Z6UE71cqQEoMr5C2iKLJChYSvL+8xPFxirGcEOkCybEaQRXr9HNdvOa+y8K:ZO7OqQs42iKFChYSvL+8AsOkx2LIa+y
- TLSH T124C46C26B6A0D076C4B79574C4A28BA6FFB1742227244BCFA39047561F637E2BE3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-27_2f1b06cca6a6ecf6fa0798e7a3e18400_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-27_2f1b06cca6a6ecf6fa0798e7a3e18400_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-27_2f1b06cca6a6ecf6fa0798e7a3e18400_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- SHA256 c01c091dfa9e1867c3d1f7ddc097d9da607a5f7c2e8a5ffc88ebf5187c200746
- MD5 2f1b06cca6a6ecf6fa0798e7a3e18400
- SHA1 efa66a6309cb93a8d310f75a6f7b2bf508b95b87
- SHA512 24aaba2499f16c3a11e8c4b45d94e02bcdd51a67b7a0bfd754e0f207a68df8d8c364478807f010ed3a43d43ae68ab81d375b4b6b44032b247aabd20aef791533
- SSDEEP 6144:Z6UE71cqQEoMr5C2iKLJChYSvL+8xPFxirGcEOkCybEaQRXr9HNdvOa+y8K:ZO7OqQs42iKFChYSvL+8AsOkx2LIa+y
- TLSH T124C46C26B6A0D076C4B79574C4A28BA6FFB1742227244BCFA39047561F637E2BE3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory