General
- Target 2026-07-28_9d9968620e3eabf9b4d55ac7b918bcfc_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- Sample260728-e8aqxsbj2x
- SHA256 a47e43a4f2652b3c1438cdb30429c63366db4100609a8fd8cd0915401a5fe8e2
- MD5 9d9968620e3eabf9b4d55ac7b918bcfc
- SHA1 7f6135ca3d1f6fdf3ae2635c3ffcf377f54366ed
- SHA512 5621592e458a0d8cd2529897ae11af4f6aa08b46d9dd9c9a230a3d09f86ac03420be14567168c1b1708169e7b971771e0f3cfedc003af0a15a79ba762906fe95
- SSDEEP 6144:cgye71cE4poJTqvpQLXNKFyLWD1nFairGcEOkCybEaQRuy8K:cI7OE4kopQzNKFyLWDHsOkxHy
- TLSH T1BDC48C2AB690C076C4B7D534C5E197AAEAB17432372449CFA3D0075A1F237E2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-28_9d9968620e3eabf9b4d55ac7b918bcfc_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-28_9d9968620e3eabf9b4d55ac7b918bcfc_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- SHA256 a47e43a4f2652b3c1438cdb30429c63366db4100609a8fd8cd0915401a5fe8e2
- MD5 9d9968620e3eabf9b4d55ac7b918bcfc
- SHA1 7f6135ca3d1f6fdf3ae2635c3ffcf377f54366ed
- SHA512 5621592e458a0d8cd2529897ae11af4f6aa08b46d9dd9c9a230a3d09f86ac03420be14567168c1b1708169e7b971771e0f3cfedc003af0a15a79ba762906fe95
- SSDEEP 6144:cgye71cE4poJTqvpQLXNKFyLWD1nFairGcEOkCybEaQRuy8K:cI7OE4kopQzNKFyLWDHsOkxHy
- TLSH T1BDC48C2AB690C076C4B7D534C5E197AAEAB17432372449CFA3D0075A1F237E2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory