General
- Target 2026-07-30_862007b9b5f15d14319aa48381049a78_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- Sample260730-sqf2wa1aph
- SHA256 56d9a90f5f650f4dc6dc4667075e36301b588b1079411e1e3c8684aaeba22035
- MD5 862007b9b5f15d14319aa48381049a78
- SHA1 b25fd71f36e1f64315f4f6a4c599e8cab369d5f5
- SHA512 ad97779e3d53d9635eccba832f7a99c3ac9dd37d5264fdb82733eb57235e77720988c2dedb7246ce69d2aa1b22b2addb0397a878edc415665badfb320e16cf87
- SSDEEP 6144:ycTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:ySvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T1DED45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-30_862007b9b5f15d14319aa48381049a78_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_862007b9b5f15d14319aa48381049a78_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- SHA256 56d9a90f5f650f4dc6dc4667075e36301b588b1079411e1e3c8684aaeba22035
- MD5 862007b9b5f15d14319aa48381049a78
- SHA1 b25fd71f36e1f64315f4f6a4c599e8cab369d5f5
- SHA512 ad97779e3d53d9635eccba832f7a99c3ac9dd37d5264fdb82733eb57235e77720988c2dedb7246ce69d2aa1b22b2addb0397a878edc415665badfb320e16cf87
- SSDEEP 6144:ycTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:ySvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T1DED45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory