General
- Target 2026-08-02_d56dfb34c3a26af94d58f737a4a086d2_amadey_coinminer_elex_smoke-loader_stop
- Size 525KB
- Sample260802-c11w2abq8s
- SHA256 a4aaf0e89f358d52eddade56f0ccc56102c5ea6c861926016a5443eb87a64ef8
- MD5 d56dfb34c3a26af94d58f737a4a086d2
- SHA1 88ea6078e85d502a51ec23cc529f66ce900f0ee5
- SHA512 24e66ffb4175aa4271a50346447d361919d095668f6462c84bc45dfa863fafc6d6772be9f0ff94d82c0db86ec87e117f97679e98cb11dc95158920fb5c5346c1
- SSDEEP 6144:ucTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K:uSvO2x9mONvKRwLSFtsOkx2LIa+y
- TLSH T1D8B47D2AB6A0D076C4779579C4A257BAFBB1742137204ACFA390475A1F237E2BE3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-02_d56dfb34c3a26af94d58f737a4a086d2_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_d56dfb34c3a26af94d58f737a4a086d2_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_d56dfb34c3a26af94d58f737a4a086d2_amadey_coinminer_elex_smoke-loader_stop
- Size 525KB
- SHA256 a4aaf0e89f358d52eddade56f0ccc56102c5ea6c861926016a5443eb87a64ef8
- MD5 d56dfb34c3a26af94d58f737a4a086d2
- SHA1 88ea6078e85d502a51ec23cc529f66ce900f0ee5
- SHA512 24e66ffb4175aa4271a50346447d361919d095668f6462c84bc45dfa863fafc6d6772be9f0ff94d82c0db86ec87e117f97679e98cb11dc95158920fb5c5346c1
- SSDEEP 6144:ucTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K:uSvO2x9mONvKRwLSFtsOkx2LIa+y
- TLSH T1D8B47D2AB6A0D076C4779579C4A257BAFBB1742137204ACFA390475A1F237E2BE3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory