General
- Target 2026-07-29_9c0e6e6ba7b585447ee95dd7ba2626f1_amadey_coinminer_elex_smoke-loader_stop
- Size 766KB
- Sample260729-lfd17s1ajf
- SHA256 a3b3acfbd8f9b9a0de921d00fd19b6120bc1ac418ca4ecc4e9f1640cbdae714e
- MD5 9c0e6e6ba7b585447ee95dd7ba2626f1
- SHA1 00e576fcecfacad1cee07140d511aa9264ef7b6d
- SHA512 3f4042225f2e206bb640ee5056c48816eedf37b21cbb372ea1810b0ac860a3fec10ec152c20891b20570975c77f2e887dda1ff4c83a8da1bd52791e8770600ff
- SSDEEP 12288:mSvO2x9mONvKRwLSFtsOkx2LIa+ya5FAQjU/Liw:FvO2xJKRw2kOkx2LFRvcUV
- TLSH T1B5F45A31E241C03AD0A74576C6FA0BAFE564BD25531155CBA3C43A6A2FB36D2BE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-29_9c0e6e6ba7b585447ee95dd7ba2626f1_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_9c0e6e6ba7b585447ee95dd7ba2626f1_amadey_coinminer_elex_smoke-loader_stop
- Size 766KB
- SHA256 a3b3acfbd8f9b9a0de921d00fd19b6120bc1ac418ca4ecc4e9f1640cbdae714e
- MD5 9c0e6e6ba7b585447ee95dd7ba2626f1
- SHA1 00e576fcecfacad1cee07140d511aa9264ef7b6d
- SHA512 3f4042225f2e206bb640ee5056c48816eedf37b21cbb372ea1810b0ac860a3fec10ec152c20891b20570975c77f2e887dda1ff4c83a8da1bd52791e8770600ff
- SSDEEP 12288:mSvO2x9mONvKRwLSFtsOkx2LIa+ya5FAQjU/Liw:FvO2xJKRw2kOkx2LFRvcUV
- TLSH T1B5F45A31E241C03AD0A74576C6FA0BAFE564BD25531155CBA3C43A6A2FB36D2BE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory