General
- Target 2026-08-01_0c990f5e00d11e874ba84736d001c2f0_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- Sample260802-bqr1psbl3t
- SHA256 ac5523687454a592a53537d1a31fbaa6c83a31b169e3055f9c2e93a5f865f4ec
- MD5 0c990f5e00d11e874ba84736d001c2f0
- SHA1 f91e76b792be6478a0efa377a8014427677d1cac
- SHA512 b78c4f6c8cf69a286385367f9d67aa35c31dc970ecdb77e9b3369f009b5cdb13a879575cf5e9881c81bce5a9a1e49db1cbd167fa2b4f641de18659dee0b21f11
- SSDEEP 6144:jcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:jSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T1ECD45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-01_0c990f5e00d11e874ba84736d001c2f0_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_0c990f5e00d11e874ba84736d001c2f0_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- SHA256 ac5523687454a592a53537d1a31fbaa6c83a31b169e3055f9c2e93a5f865f4ec
- MD5 0c990f5e00d11e874ba84736d001c2f0
- SHA1 f91e76b792be6478a0efa377a8014427677d1cac
- SHA512 b78c4f6c8cf69a286385367f9d67aa35c31dc970ecdb77e9b3369f009b5cdb13a879575cf5e9881c81bce5a9a1e49db1cbd167fa2b4f641de18659dee0b21f11
- SSDEEP 6144:jcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:jSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T1ECD45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory