General
- Target 2026-07-31_dfb4687524a3d4a1897e0f24e4deacd9_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- Sample260731-krpfmsfg29
- SHA256 37aba5c1858f1582710050de851b8775ee94e9e1318c5aa4b44d26c0be697e1f
- MD5 dfb4687524a3d4a1897e0f24e4deacd9
- SHA1 a39a62aa19145019764a8cbbda78dabcbe1a209b
- SHA512 35b09f698fbf956e2798fb39c71d04bc655b7047f94f4cb1f198dee25ab1ba380bb1968dbe97297b2a83eb604d69eedbecd524e5bc0b16d378de25d42c6547b4
- SSDEEP 6144:AcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:ASvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T139D45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-31_dfb4687524a3d4a1897e0f24e4deacd9_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_dfb4687524a3d4a1897e0f24e4deacd9_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- SHA256 37aba5c1858f1582710050de851b8775ee94e9e1318c5aa4b44d26c0be697e1f
- MD5 dfb4687524a3d4a1897e0f24e4deacd9
- SHA1 a39a62aa19145019764a8cbbda78dabcbe1a209b
- SHA512 35b09f698fbf956e2798fb39c71d04bc655b7047f94f4cb1f198dee25ab1ba380bb1968dbe97297b2a83eb604d69eedbecd524e5bc0b16d378de25d42c6547b4
- SSDEEP 6144:AcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:ASvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T139D45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory