General
- Target 2026-08-01_d3ad6e6cf13922eb9b725891b8224bfd_amadey_coinminer_elex_smoke-loader_stop
- Size 615KB
- Sample260801-c3xmdscd46
- SHA256 366e77dc0f2218aaef0741dba5fc7dc9ae25cc2eac362d03e09c7ca160b31a6d
- MD5 d3ad6e6cf13922eb9b725891b8224bfd
- SHA1 a30ab6e9608ff8e40c7f61ac3d0ad26a7ce02cb5
- SHA512 504a04436499ecc08a454ddcd4662138d1b1e140ac2ef4fab72dd5272f0b828f0e18d8c7d00481b03093c3eb49f429d24efb3bc71803b6c3e49adfc04e0a37bf
- SSDEEP 12288:dSvO2x9mONvKRILSFnOkx2LIax5FAQjU/Liw:8vO2xJKRI2FOkx2LFicUV
- TLSH T1C0D44A31E241C03AD4A74576C6FA0BAFE5647D25531165CBA3C43A2A2FB36D2BE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-01_d3ad6e6cf13922eb9b725891b8224bfd_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_d3ad6e6cf13922eb9b725891b8224bfd_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_d3ad6e6cf13922eb9b725891b8224bfd_amadey_coinminer_elex_smoke-loader_stop
- Size 615KB
- SHA256 366e77dc0f2218aaef0741dba5fc7dc9ae25cc2eac362d03e09c7ca160b31a6d
- MD5 d3ad6e6cf13922eb9b725891b8224bfd
- SHA1 a30ab6e9608ff8e40c7f61ac3d0ad26a7ce02cb5
- SHA512 504a04436499ecc08a454ddcd4662138d1b1e140ac2ef4fab72dd5272f0b828f0e18d8c7d00481b03093c3eb49f429d24efb3bc71803b6c3e49adfc04e0a37bf
- SSDEEP 12288:dSvO2x9mONvKRILSFnOkx2LIax5FAQjU/Liw:8vO2xJKRI2FOkx2LFicUV
- TLSH T1C0D44A31E241C03AD4A74576C6FA0BAFE5647D25531165CBA3C43A2A2FB36D2BE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory