General
- Target 2026-07-30_cd42c8ca935af1461ae8f32e8d9e615f_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- Sample260730-ddln9sag44
- SHA256 85c6c482bfdb027c9476e6a02fe485d794e0b14a1dc2815b0ad53e8d100a2834
- MD5 cd42c8ca935af1461ae8f32e8d9e615f
- SHA1 577a365bb59d378505b0398fbdd1c6ec57e94d86
- SHA512 623ec24e85a72762e7c83558635ffac26ca5b9d421f77b5603884b7312c1a9d15df8a43f7d63f913d4df9de5828348ce9ef20599b41d4e60259f2f737088650b
- SSDEEP 6144:zcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:zSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T1C9D45B35A6808036C4B74631C6F64BAAF9B5BC21631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-30_cd42c8ca935af1461ae8f32e8d9e615f_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_cd42c8ca935af1461ae8f32e8d9e615f_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- SHA256 85c6c482bfdb027c9476e6a02fe485d794e0b14a1dc2815b0ad53e8d100a2834
- MD5 cd42c8ca935af1461ae8f32e8d9e615f
- SHA1 577a365bb59d378505b0398fbdd1c6ec57e94d86
- SHA512 623ec24e85a72762e7c83558635ffac26ca5b9d421f77b5603884b7312c1a9d15df8a43f7d63f913d4df9de5828348ce9ef20599b41d4e60259f2f737088650b
- SSDEEP 6144:zcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:zSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T1C9D45B35A6808036C4B74631C6F64BAAF9B5BC21631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory