General
- Target 2026-08-01_95429802e12d1df87718334414e191af_amadey_coinminer_elex_smoke-loader_stop
- Size 761KB
- Sample260802-ah8staal7t
- SHA256 3b231a2a0411c58f96946faaa7cefd4fa6414fda9b58f0de7825fd97e2d4ed46
- MD5 95429802e12d1df87718334414e191af
- SHA1 bde4f81424b8dc66e5cd66cc2ee6a11d255f9def
- SHA512 c08b51f07225b8693b0b8a0cf664846b2dfa51d5ad75502315a58dbdcf6f52d26bfb4271f710d764b077db559c2bc2c6d9bd2c10bddabc5c59e398401a3331c5
- SSDEEP 12288:ZSvO2x9mONvKRwLSFtsOkxHya5hYIW0p98B:gvO2xJKRw2kOkxSkW298B
- TLSH T10DF49E35A2808036C0B34532C6F94AABF9797D35631565CBA3843B662F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-01_95429802e12d1df87718334414e191af_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_95429802e12d1df87718334414e191af_amadey_coinminer_elex_smoke-loader_stop
- Size 761KB
- SHA256 3b231a2a0411c58f96946faaa7cefd4fa6414fda9b58f0de7825fd97e2d4ed46
- MD5 95429802e12d1df87718334414e191af
- SHA1 bde4f81424b8dc66e5cd66cc2ee6a11d255f9def
- SHA512 c08b51f07225b8693b0b8a0cf664846b2dfa51d5ad75502315a58dbdcf6f52d26bfb4271f710d764b077db559c2bc2c6d9bd2c10bddabc5c59e398401a3331c5
- SSDEEP 12288:ZSvO2x9mONvKRwLSFtsOkxHya5hYIW0p98B:gvO2xJKRw2kOkxSkW298B
- TLSH T10DF49E35A2808036C0B34532C6F94AABF9797D35631565CBA3843B662F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory