General
- Target 2026-07-29_6cba9bfcb595262a256c44972222a225_amadey_coinminer_elex_smoke-loader_stop
- Size 525KB
- Sample260730-adedeayvcy
- SHA256 4c501b007bdf54de1c362f2421a9ffc00477bc7b5926c73aed3bb80be3ad28c0
- MD5 6cba9bfcb595262a256c44972222a225
- SHA1 618421ac28f37bc1be57972e395b098fbd41a435
- SHA512 05415ce98973d5c8a69d2476a77a22b27f575bf376a6e8330aa18ea3885b609f1a519a582cb9ce941ad8178e4f4e2a011b49bc645ddba09661fc726dfe3b3387
- SSDEEP 6144:WcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K:WSvO2x9mONvKRwLSFtsOkx2LIa+y
- TLSH T12AB47D2AB6A0D076C4779579C4A257BAFBB1742137204ACFA390475A1F237E2BE3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-29_6cba9bfcb595262a256c44972222a225_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-29_6cba9bfcb595262a256c44972222a225_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win11ltsc2024-20260710-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_6cba9bfcb595262a256c44972222a225_amadey_coinminer_elex_smoke-loader_stop
- Size 525KB
- SHA256 4c501b007bdf54de1c362f2421a9ffc00477bc7b5926c73aed3bb80be3ad28c0
- MD5 6cba9bfcb595262a256c44972222a225
- SHA1 618421ac28f37bc1be57972e395b098fbd41a435
- SHA512 05415ce98973d5c8a69d2476a77a22b27f575bf376a6e8330aa18ea3885b609f1a519a582cb9ce941ad8178e4f4e2a011b49bc645ddba09661fc726dfe3b3387
- SSDEEP 6144:WcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K:WSvO2x9mONvKRwLSFtsOkx2LIa+y
- TLSH T12AB47D2AB6A0D076C4779579C4A257BAFBB1742137204ACFA390475A1F237E2BE3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10- Custom signature
UPX dump on OEP (original entry point)
Executes dropped EXE
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
Drops file in System32 directory