General
- Target 2026-07-30_481661c3c880ed94110051cb92e8bfbf_amadey_coinminer_elex_smoke-loader_stop
- Size 525KB
- Sample260730-d42heabb98
- SHA256 3d42d43d06b3902e0c0913ac3e3d1781f133ac92d6b60bea4c7f4c08c099e00c
- MD5 481661c3c880ed94110051cb92e8bfbf
- SHA1 fac0ebe7c8d8b0cd75a1a18db660ff9d55ee6006
- SHA512 eedcdad6db8f04a0802bee739fe9b9884a21182bbf2003fb2f68434325c205d03c5bd659f130866cd54c6498df0077a10b45afdd14e8a59962e2f0af5f9d6222
- SSDEEP 6144:TcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K:TSvO2x9mONvKRwLSFtsOkx2LIa+y
- TLSH T150B47D2AB6A0D076C4779579C4A257BAFBB1742137204ACFA390475A1F237E2BE3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-30_481661c3c880ed94110051cb92e8bfbf_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_481661c3c880ed94110051cb92e8bfbf_amadey_coinminer_elex_smoke-loader_stop
- Size 525KB
- SHA256 3d42d43d06b3902e0c0913ac3e3d1781f133ac92d6b60bea4c7f4c08c099e00c
- MD5 481661c3c880ed94110051cb92e8bfbf
- SHA1 fac0ebe7c8d8b0cd75a1a18db660ff9d55ee6006
- SHA512 eedcdad6db8f04a0802bee739fe9b9884a21182bbf2003fb2f68434325c205d03c5bd659f130866cd54c6498df0077a10b45afdd14e8a59962e2f0af5f9d6222
- SSDEEP 6144:TcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K:TSvO2x9mONvKRwLSFtsOkx2LIa+y
- TLSH T150B47D2AB6A0D076C4779579C4A257BAFBB1742137204ACFA390475A1F237E2BE3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Custom signature
UPX dump on OEP (original entry point)
Executes dropped EXE
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
Drops file in System32 directory