General
- Target 2026-07-28_50ed438ae31a9ee3f76d8372938a534b_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- Sample260729-bmkr8as1hs
- SHA256 c97d58d8a17dc5607132fa01cb81603f27bab2637ae01193126e680b3b9c81f0
- MD5 50ed438ae31a9ee3f76d8372938a534b
- SHA1 e2a5a59a3c629c9ca6740bff87e7c2cf5702ec59
- SHA512 ff0162bbdd8d9bff39eb1a6a22a437a4f965bce49e9ac4238b5df17b0b8bb6ec50c93419cb16e362e46bb2718c6a6f475f840655996521e31c67da0d015827b3
- SSDEEP 6144:ycTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:ySvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T153D45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-28_50ed438ae31a9ee3f76d8372938a534b_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-28_50ed438ae31a9ee3f76d8372938a534b_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- SHA256 c97d58d8a17dc5607132fa01cb81603f27bab2637ae01193126e680b3b9c81f0
- MD5 50ed438ae31a9ee3f76d8372938a534b
- SHA1 e2a5a59a3c629c9ca6740bff87e7c2cf5702ec59
- SHA512 ff0162bbdd8d9bff39eb1a6a22a437a4f965bce49e9ac4238b5df17b0b8bb6ec50c93419cb16e362e46bb2718c6a6f475f840655996521e31c67da0d015827b3
- SSDEEP 6144:ycTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:ySvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T153D45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory