General
- Target 2026-07-29_2db38ae4dc46b0d868eef21a36cbfd7e_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- Sample260730-ajtehsaj61
- SHA256 515fd2af8a8112a6ecca0e08eb6ce82a2c7ffac1cf9f2ef3dfc30a1f2031f038
- MD5 2db38ae4dc46b0d868eef21a36cbfd7e
- SHA1 d4428dd935b2f123138d11886345d64307a81730
- SHA512 48de0b59d7022ae6fd1223ff83a4583f2c614000302501417a6b41d5f9213b379c827589c9f6fdd59f9a92712f87dbe469500fcd75fb6ee522156295cef68088
- SSDEEP 6144:CWVrC1c2oonALgPLj7vf1LKlyIFVirGcEOkCybEaQRXr9HNdvOa+y8K:CkCO2zVPX7vf1LKlIsOkx2LIa+y
- TLSH T10AC47C2AF6A0C036C4779574C4A257AAFFB1B42127204ACFA390475A1F637E2BE7531D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-29_2db38ae4dc46b0d868eef21a36cbfd7e_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_2db38ae4dc46b0d868eef21a36cbfd7e_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- SHA256 515fd2af8a8112a6ecca0e08eb6ce82a2c7ffac1cf9f2ef3dfc30a1f2031f038
- MD5 2db38ae4dc46b0d868eef21a36cbfd7e
- SHA1 d4428dd935b2f123138d11886345d64307a81730
- SHA512 48de0b59d7022ae6fd1223ff83a4583f2c614000302501417a6b41d5f9213b379c827589c9f6fdd59f9a92712f87dbe469500fcd75fb6ee522156295cef68088
- SSDEEP 6144:CWVrC1c2oonALgPLj7vf1LKlyIFVirGcEOkCybEaQRXr9HNdvOa+y8K:CkCO2zVPX7vf1LKlIsOkx2LIa+y
- TLSH T10AC47C2AF6A0C036C4779574C4A257AAFFB1B42127204ACFA390475A1F637E2BE7531D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory