General
- Target 2026-07-31_47fc664a17c67f4c36dd3b02b2b7bfc0_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- Sample260731-btw4tsaf79
- SHA256 31f08153f36d760be085a3cea03d1f0b95c84c7db28e17283c0b463e39b17803
- MD5 47fc664a17c67f4c36dd3b02b2b7bfc0
- SHA1 0abc06ef6d49a9953605954cf75a166db1242ae5
- SHA512 e12352c4e31c233184351a804996bf47e86f2bba9fd3ef7652921831f24bf2f149517cac2bf8b52ed35f39a3df296eb694ce67710c78d2d1f23e88235a3d8648
- SSDEEP 6144:ZcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:ZSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T1F5D45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-31_47fc664a17c67f4c36dd3b02b2b7bfc0_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_47fc664a17c67f4c36dd3b02b2b7bfc0_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- SHA256 31f08153f36d760be085a3cea03d1f0b95c84c7db28e17283c0b463e39b17803
- MD5 47fc664a17c67f4c36dd3b02b2b7bfc0
- SHA1 0abc06ef6d49a9953605954cf75a166db1242ae5
- SHA512 e12352c4e31c233184351a804996bf47e86f2bba9fd3ef7652921831f24bf2f149517cac2bf8b52ed35f39a3df296eb694ce67710c78d2d1f23e88235a3d8648
- SSDEEP 6144:ZcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:ZSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T1F5D45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory