General
- Target 2026-07-29_d8233e25be894104b85ab46a940d4865_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- Sample260729-3smmjsvela
- SHA256 1b79290cce78e37e2918737135781cceaa64a462f4834e4a8dcb705fb3121998
- MD5 d8233e25be894104b85ab46a940d4865
- SHA1 d5f60c4751a907470e3b5d3e7c0cc20c810909f3
- SHA512 82aa572630e074d340d1b681c4654f1b3cb5dd961f1ba7d56d30a86a8242f0e38f7aa4c20b9c9221646ee458dffd476531ada562a691be236248259656d83527
- SSDEEP 6144:D4ZaN1cb90oOTFmIFLq0cvnXhLCqj2EFNirGcEOkCybEaQRuy8K:DrNOb9+sIF+0cvnXhLCqEsOkxHy
- TLSH T1DEC48D29B6E0C076C4B79578C4A186B6FAB17832372459CFA394075A1F337E2BA3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-29_d8233e25be894104b85ab46a940d4865_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-29_d8233e25be894104b85ab46a940d4865_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_d8233e25be894104b85ab46a940d4865_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- SHA256 1b79290cce78e37e2918737135781cceaa64a462f4834e4a8dcb705fb3121998
- MD5 d8233e25be894104b85ab46a940d4865
- SHA1 d5f60c4751a907470e3b5d3e7c0cc20c810909f3
- SHA512 82aa572630e074d340d1b681c4654f1b3cb5dd961f1ba7d56d30a86a8242f0e38f7aa4c20b9c9221646ee458dffd476531ada562a691be236248259656d83527
- SSDEEP 6144:D4ZaN1cb90oOTFmIFLq0cvnXhLCqj2EFNirGcEOkCybEaQRuy8K:DrNOb9+sIF+0cvnXhLCqEsOkxHy
- TLSH T1DEC48D29B6E0C076C4B79578C4A186B6FAB17832372459CFA394075A1F337E2BA3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory