General
- Target 2026-07-30_3620ddb9e6a5989e5dde35701caa6818_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- Sample260730-pp388sxgja
- SHA256 f34693bd5e986f3ca083473f303e9874986523f6b030b10680466fd4f046d1aa
- MD5 3620ddb9e6a5989e5dde35701caa6818
- SHA1 9a3dcc436f237cbad8549d06d5eb14feb85dd435
- SHA512 b89468bceea4720c03b3550805a093f80899075ca218e0ad9571463adfe96d6b9c57b7ba12c333c886519807b73fd569f24f10228fc1ee8993fb82058e5ad9cf
- SSDEEP 6144:24ZaN1cb90oOTFmIFLq0cvnXhLCqj2EFNirGcEOkCybEaQRuy8K:2rNOb9+sIF+0cvnXhLCqEsOkxHy
- TLSH T1C1C48D29B6E0C076C4B79578C4A186B6FAB17832372459CFA394075A1F337E2BA3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-30_3620ddb9e6a5989e5dde35701caa6818_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_3620ddb9e6a5989e5dde35701caa6818_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- SHA256 f34693bd5e986f3ca083473f303e9874986523f6b030b10680466fd4f046d1aa
- MD5 3620ddb9e6a5989e5dde35701caa6818
- SHA1 9a3dcc436f237cbad8549d06d5eb14feb85dd435
- SHA512 b89468bceea4720c03b3550805a093f80899075ca218e0ad9571463adfe96d6b9c57b7ba12c333c886519807b73fd569f24f10228fc1ee8993fb82058e5ad9cf
- SSDEEP 6144:24ZaN1cb90oOTFmIFLq0cvnXhLCqj2EFNirGcEOkCybEaQRuy8K:2rNOb9+sIF+0cvnXhLCqEsOkxHy
- TLSH T1C1C48D29B6E0C076C4B79578C4A186B6FAB17832372459CFA394075A1F337E2BA3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory