General
- Target 2026-07-29_a13709db80c4f510c26194bb56a02866_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- Sample260729-31lefsvfmd
- SHA256 5372f7471da7888f6f64f68b715ffdd4ad777554958a020d6a36dc42310f3767
- MD5 a13709db80c4f510c26194bb56a02866
- SHA1 36b3d0b85f76f06bfe11e7c07355ea1633cafbc9
- SHA512 49abc64e3b044333495ad16259427f7f49318dda1a041999e472031e47baad63560fed1b8bf7d78693f5c5337290a25f59116af42f334d6cd3ce1bec39d1d342
- SSDEEP 6144:7gye71cE4poJTqvpQLXNKFyLWD1nFairGcEOkCybEaQRuy8K:7I7OE4kopQzNKFyLWDHsOkxHy
- TLSH T1E8C48C2AB690C076C4B7D534C5E197AAEAB17432372449CFA7D0075A1F237E2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-29_a13709db80c4f510c26194bb56a02866_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_a13709db80c4f510c26194bb56a02866_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- SHA256 5372f7471da7888f6f64f68b715ffdd4ad777554958a020d6a36dc42310f3767
- MD5 a13709db80c4f510c26194bb56a02866
- SHA1 36b3d0b85f76f06bfe11e7c07355ea1633cafbc9
- SHA512 49abc64e3b044333495ad16259427f7f49318dda1a041999e472031e47baad63560fed1b8bf7d78693f5c5337290a25f59116af42f334d6cd3ce1bec39d1d342
- SSDEEP 6144:7gye71cE4poJTqvpQLXNKFyLWD1nFairGcEOkCybEaQRuy8K:7I7OE4kopQzNKFyLWDHsOkxHy
- TLSH T1E8C48C2AB690C076C4B7D534C5E197AAEAB17432372449CFA7D0075A1F237E2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory