General
- Target 2026-07-29_15b9ccc8feb4b1ee5d96c81706b36280_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- Sample260730-althasvgrd
- SHA256 4680f7985803360dc2a43a4403466836f1308d624a9721da0d54206cff75075b
- MD5 15b9ccc8feb4b1ee5d96c81706b36280
- SHA1 f21c6886b3161033749ebe5da93cec72a24636a0
- SHA512 b75e6ba467b238182143d51281dcb71dc7a9922014a6a66799e734c26e98b4ca1df7edbea2e622560291413b547b5d932ee4c6ef26663b0e77aeceefe19166c6
- SSDEEP 6144:wgye71cE4poJTqvpQLXNKFyLWD1nFairGcEOkCybEaQRuy8K:wI7OE4kopQzNKFyLWDHsOkxHy
- TLSH T10DC48C2AB690C076C4B7D534C5E197AAEAB17432372449CFA3D0075A1F237E2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-29_15b9ccc8feb4b1ee5d96c81706b36280_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-29_15b9ccc8feb4b1ee5d96c81706b36280_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_15b9ccc8feb4b1ee5d96c81706b36280_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- SHA256 4680f7985803360dc2a43a4403466836f1308d624a9721da0d54206cff75075b
- MD5 15b9ccc8feb4b1ee5d96c81706b36280
- SHA1 f21c6886b3161033749ebe5da93cec72a24636a0
- SHA512 b75e6ba467b238182143d51281dcb71dc7a9922014a6a66799e734c26e98b4ca1df7edbea2e622560291413b547b5d932ee4c6ef26663b0e77aeceefe19166c6
- SSDEEP 6144:wgye71cE4poJTqvpQLXNKFyLWD1nFairGcEOkCybEaQRuy8K:wI7OE4kopQzNKFyLWDHsOkxHy
- TLSH T10DC48C2AB690C076C4B7D534C5E197AAEAB17432372449CFA3D0075A1F237E2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory