General
- Target 2026-07-29_0284b8fd492098367fbc73a9cd9e65a7_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- Sample260730-ane3payyey
- SHA256 3ba9cfa8d73e23d5d49f190aae2449953b3884c9b987820eb79fabb3f082c5db
- MD5 0284b8fd492098367fbc73a9cd9e65a7
- SHA1 2408c2acfe14bb66e682ea3373b3eb5ba40232fa
- SHA512 1567f7697f419030c33e0cce08ce9ac51f44deed9f94fda845fb202cf02e9d45a1b57433ee19f1073cd10c670d95c63ae3d49d1e1e625638398bead093c700b9
- SSDEEP 6144:IcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:ISvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T1B9D45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-29_0284b8fd492098367fbc73a9cd9e65a7_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-29_0284b8fd492098367fbc73a9cd9e65a7_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win11ltsc2024-20260710-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_0284b8fd492098367fbc73a9cd9e65a7_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- SHA256 3ba9cfa8d73e23d5d49f190aae2449953b3884c9b987820eb79fabb3f082c5db
- MD5 0284b8fd492098367fbc73a9cd9e65a7
- SHA1 2408c2acfe14bb66e682ea3373b3eb5ba40232fa
- SHA512 1567f7697f419030c33e0cce08ce9ac51f44deed9f94fda845fb202cf02e9d45a1b57433ee19f1073cd10c670d95c63ae3d49d1e1e625638398bead093c700b9
- SSDEEP 6144:IcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:ISvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T1B9D45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory