General
- Target 2026-07-30_34d28fa6e8b548f8f73a96a0ecd0a4b0_amadey_coinminer_elex_smoke-loader_stop
- Size 615KB
- Sample260730-ghps9s1cpb
- SHA256 0fc7e739a353bb9c96c6bb6e4a93e5766c779fd618e10c3cc1fc6ae88c5ebfeb
- MD5 34d28fa6e8b548f8f73a96a0ecd0a4b0
- SHA1 7f25e1003dcaf1fe21764d88acf2f06cc129f3a5
- SHA512 a6fd9a8fed3d375eeb343ab91e9e98cd1c0d2ff5c9dae8e48d81297799e4abdf5dec0d61ea06a8a26fb6133880073a62c29f59fae37455c36bb5b7acbb0ea0fc
- SSDEEP 12288:RSvO2x9mONvKRILSFnOkx2LIax5FAQjU/Liw:4vO2xJKRI2FOkx2LFicUV
- TLSH T15BD44A31E241C03AD4A74576C6FA0BAFE5647D25531165CBA3C43A2A2FB36D2BE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-30_34d28fa6e8b548f8f73a96a0ecd0a4b0_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_34d28fa6e8b548f8f73a96a0ecd0a4b0_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win11ltsc2024-20260710-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_34d28fa6e8b548f8f73a96a0ecd0a4b0_amadey_coinminer_elex_smoke-loader_stop
- Size 615KB
- SHA256 0fc7e739a353bb9c96c6bb6e4a93e5766c779fd618e10c3cc1fc6ae88c5ebfeb
- MD5 34d28fa6e8b548f8f73a96a0ecd0a4b0
- SHA1 7f25e1003dcaf1fe21764d88acf2f06cc129f3a5
- SHA512 a6fd9a8fed3d375eeb343ab91e9e98cd1c0d2ff5c9dae8e48d81297799e4abdf5dec0d61ea06a8a26fb6133880073a62c29f59fae37455c36bb5b7acbb0ea0fc
- SSDEEP 12288:RSvO2x9mONvKRILSFnOkx2LIax5FAQjU/Liw:4vO2xJKRI2FOkx2LFicUV
- TLSH T15BD44A31E241C03AD4A74576C6FA0BAFE5647D25531165CBA3C43A2A2FB36D2BE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory