General
- Target 2026-08-01_2de88866d234ca99a07ec91e64d1f863_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- Sample260802-be9flsbj4y
- SHA256 651d1752f4025daa3d897a75a982ff3de5380d8736fd78dca9d4c56f1bd3b89f
- MD5 2de88866d234ca99a07ec91e64d1f863
- SHA1 bb7dcc7b50f8e0b76c78eef0b76bc9bcb93d55bd
- SHA512 7e816263092f200290c9caff2df333a5c1118fae8ec6bb66d4d5f766dc735cea4729848d12cfd843a3d1d6aad84058f4a6f9679b754f026199b362921d9aa01b
- SSDEEP 6144:lcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:lSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T1F0D45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-01_2de88866d234ca99a07ec91e64d1f863_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_2de88866d234ca99a07ec91e64d1f863_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- SHA256 651d1752f4025daa3d897a75a982ff3de5380d8736fd78dca9d4c56f1bd3b89f
- MD5 2de88866d234ca99a07ec91e64d1f863
- SHA1 bb7dcc7b50f8e0b76c78eef0b76bc9bcb93d55bd
- SHA512 7e816263092f200290c9caff2df333a5c1118fae8ec6bb66d4d5f766dc735cea4729848d12cfd843a3d1d6aad84058f4a6f9679b754f026199b362921d9aa01b
- SSDEEP 6144:lcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:lSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T1F0D45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory