General
- Target 2026-07-30_51997b8dd798aab7f6028e2053216fb9_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- Sample260730-gcpajsce35
- SHA256 4111825bdcbd08ca22410c2d903b23a0a7dc1e2e44bdf8841a8b5054949ac4f3
- MD5 51997b8dd798aab7f6028e2053216fb9
- SHA1 0937ff4e3a35e853bae9890abfffee3a4652f8db
- SHA512 343369e31b56fdf4b69c5a265ca248a81f63bd8c81b283ef5b372adf62fc9342766ab8794705e2a58d5f5d7ea12c2795fc6e207684c5fd99870967681df67c41
- SSDEEP 6144:9cTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:9SvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T1D7D45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-30_51997b8dd798aab7f6028e2053216fb9_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_51997b8dd798aab7f6028e2053216fb9_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_51997b8dd798aab7f6028e2053216fb9_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- SHA256 4111825bdcbd08ca22410c2d903b23a0a7dc1e2e44bdf8841a8b5054949ac4f3
- MD5 51997b8dd798aab7f6028e2053216fb9
- SHA1 0937ff4e3a35e853bae9890abfffee3a4652f8db
- SHA512 343369e31b56fdf4b69c5a265ca248a81f63bd8c81b283ef5b372adf62fc9342766ab8794705e2a58d5f5d7ea12c2795fc6e207684c5fd99870967681df67c41
- SSDEEP 6144:9cTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:9SvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T1D7D45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory