General
- Target 2026-07-29_0db17d212a2e2a8c39141898e6dc8a6d_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- Sample260730-amhr7avhlc
- SHA256 00cb7e7772e8b354a7ecb010e6d6611d5116ceddf2249f9fa3e45861ebd894e9
- MD5 0db17d212a2e2a8c39141898e6dc8a6d
- SHA1 b0180dbb1bf4c0cdcce04c4855f347ad042f0526
- SHA512 8ffabb85af92ff8604a4db3c67b15cf36cde5ef78c86e71038aa049e3bd36d4d8b741ce47e805b3c7f24d33b28df26498aa48e8fbfc9d30b388dbbca380548fa
- SSDEEP 6144:fcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:fSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T132D45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-29_0db17d212a2e2a8c39141898e6dc8a6d_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_0db17d212a2e2a8c39141898e6dc8a6d_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- SHA256 00cb7e7772e8b354a7ecb010e6d6611d5116ceddf2249f9fa3e45861ebd894e9
- MD5 0db17d212a2e2a8c39141898e6dc8a6d
- SHA1 b0180dbb1bf4c0cdcce04c4855f347ad042f0526
- SHA512 8ffabb85af92ff8604a4db3c67b15cf36cde5ef78c86e71038aa049e3bd36d4d8b741ce47e805b3c7f24d33b28df26498aa48e8fbfc9d30b388dbbca380548fa
- SSDEEP 6144:fcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:fSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T132D45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory