General
- Target 2026-07-30_3918276299395cee7b12cf3cf4805eed_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- Sample260730-pp2emsam3w
- SHA256 290409850d6d468124dc841a9270142be1344cc6e6f4999c9d0b6dac7a290e81
- MD5 3918276299395cee7b12cf3cf4805eed
- SHA1 cc1721d4ae6ec8b79b8129e7ec971c7ef7806a19
- SHA512 96a0aab587391ae8e92040d2f09b4f7907362cc301e44b97d17f2b0ae899a86834a56d7586d6ddd9dd8d23764d0e686645ddbe90bfc4079e9daef269bd29e260
- SSDEEP 6144:fUJJuV1cdhIoA7vJ0CLoCgvDLe4AmFvirGcEOkCybEaQRuy8K:fYsVOdhElvkCgvDLe4usOkxHy
- TLSH T164C48D29B6D0C036C5B39574C4A186BAEAB17432372549CFA3D5475A0F337E2BA7930E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-30_3918276299395cee7b12cf3cf4805eed_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_3918276299395cee7b12cf3cf4805eed_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- SHA256 290409850d6d468124dc841a9270142be1344cc6e6f4999c9d0b6dac7a290e81
- MD5 3918276299395cee7b12cf3cf4805eed
- SHA1 cc1721d4ae6ec8b79b8129e7ec971c7ef7806a19
- SHA512 96a0aab587391ae8e92040d2f09b4f7907362cc301e44b97d17f2b0ae899a86834a56d7586d6ddd9dd8d23764d0e686645ddbe90bfc4079e9daef269bd29e260
- SSDEEP 6144:fUJJuV1cdhIoA7vJ0CLoCgvDLe4AmFvirGcEOkCybEaQRuy8K:fYsVOdhElvkCgvDLe4usOkxHy
- TLSH T164C48D29B6D0C036C5B39574C4A186BAEAB17432372549CFA3D5475A0F337E2BA7930E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory