General
- Target 2026-07-28_4407fa62ffccb5411e9dd508e8bd3ce2_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- Sample260728-23mvmabn4t
- SHA256 78582f3b305e45574f5e7c26740a6feeb19ee1a9e8a189564b763dc7e598eae5
- MD5 4407fa62ffccb5411e9dd508e8bd3ce2
- SHA1 81108fb358b26d84d5680d3774a4775c18af29a9
- SHA512 a7bfece165aeb93d5703a29c3df28d785cac0494dacdfbd7f33e30554d0c6b7570e4e19f2aacf7a04d80f81a91a31386d4a973e6a4b9355dc5ac9816594125d3
- SSDEEP 6144:5WVrC1c2oonALgPLj7vf1LKlyIFVirGcEOkCybEaQRXr9HNdvOa+y8K:5kCO2zVPX7vf1LKlIsOkx2LIa+y
- TLSH T140C47C2AF6A0C036C4779574C4A257AAFFB1B42127204ACFA390475A1F637E2BE7531D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-28_4407fa62ffccb5411e9dd508e8bd3ce2_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-28_4407fa62ffccb5411e9dd508e8bd3ce2_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- SHA256 78582f3b305e45574f5e7c26740a6feeb19ee1a9e8a189564b763dc7e598eae5
- MD5 4407fa62ffccb5411e9dd508e8bd3ce2
- SHA1 81108fb358b26d84d5680d3774a4775c18af29a9
- SHA512 a7bfece165aeb93d5703a29c3df28d785cac0494dacdfbd7f33e30554d0c6b7570e4e19f2aacf7a04d80f81a91a31386d4a973e6a4b9355dc5ac9816594125d3
- SSDEEP 6144:5WVrC1c2oonALgPLj7vf1LKlyIFVirGcEOkCybEaQRXr9HNdvOa+y8K:5kCO2zVPX7vf1LKlIsOkx2LIa+y
- TLSH T140C47C2AF6A0C036C4779574C4A257AAFFB1B42127204ACFA390475A1F637E2BE7531D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory