General
- Target 2026-07-29_49e8e7ae23647d904ef928f0b41b8fa7_amadey_coinminer_elex_smoke-loader_stop
- Size 576KB
- Sample260730-af6wfaywcx
- SHA256 1e5976988116907f3922dd10d6648b83aecd5e6426ef1e7f23527f99fd6988ad
- MD5 49e8e7ae23647d904ef928f0b41b8fa7
- SHA1 e3be469901259f5d4d3dde7c138980e1566302f7
- SHA512 6d478959fd9301d97e6b45f8031903dc660175fb1db9a9fe2f3e18a8830c439b6c5bbaf5ca5741154041c78b8f927c99f2849a9e7767267a0f67b1c7e862bff8
- SSDEEP 6144:/cTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K/:/SvO2x9mONvKRwLSFtsOkx2LIa+yx
- TLSH T19CC46D26B6908072C4779578C4A257AAFBB1BC2127204ACFA390775A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-29_49e8e7ae23647d904ef928f0b41b8fa7_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_49e8e7ae23647d904ef928f0b41b8fa7_amadey_coinminer_elex_smoke-loader_stop
- Size 576KB
- SHA256 1e5976988116907f3922dd10d6648b83aecd5e6426ef1e7f23527f99fd6988ad
- MD5 49e8e7ae23647d904ef928f0b41b8fa7
- SHA1 e3be469901259f5d4d3dde7c138980e1566302f7
- SHA512 6d478959fd9301d97e6b45f8031903dc660175fb1db9a9fe2f3e18a8830c439b6c5bbaf5ca5741154041c78b8f927c99f2849a9e7767267a0f67b1c7e862bff8
- SSDEEP 6144:/cTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K/:/SvO2x9mONvKRwLSFtsOkx2LIa+yx
- TLSH T19CC46D26B6908072C4779578C4A257AAFBB1BC2127204ACFA390775A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory