General
- Target 2026-08-02_edf907e9965288ed452ca579a537e685_amadey_coinminer_elex_smoke-loader_stop
- Size 576KB
- Sample260802-qn1mdstejb
- SHA256 f0f7de76c1d5a35b259627f12a27b7541686841401a248b645b26ecd6de4aa3f
- MD5 edf907e9965288ed452ca579a537e685
- SHA1 885e41f4ffb1f8d7682aacb73c6536ca573c8d92
- SHA512 2a9ee93153a02f6c4d26b5e9005b0c42aee90237a1d0a153174ec34c7e3eb09dc7fd74bd9160bb0dc50c85da14ddae686c7f36b8f01a8f977e611e75d42ec519
- SSDEEP 6144:ccTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K/:cSvO2x9mONvKRwLSFtsOkx2LIa+yx
- TLSH T1FEC46D26B6908072C4779578C4A257AAFBB1BC2127204ACFA390775A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-02_edf907e9965288ed452ca579a537e685_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_edf907e9965288ed452ca579a537e685_amadey_coinminer_elex_smoke-loader_stop
- Size 576KB
- SHA256 f0f7de76c1d5a35b259627f12a27b7541686841401a248b645b26ecd6de4aa3f
- MD5 edf907e9965288ed452ca579a537e685
- SHA1 885e41f4ffb1f8d7682aacb73c6536ca573c8d92
- SHA512 2a9ee93153a02f6c4d26b5e9005b0c42aee90237a1d0a153174ec34c7e3eb09dc7fd74bd9160bb0dc50c85da14ddae686c7f36b8f01a8f977e611e75d42ec519
- SSDEEP 6144:ccTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K/:cSvO2x9mONvKRwLSFtsOkx2LIa+yx
- TLSH T1FEC46D26B6908072C4779578C4A257AAFBB1BC2127204ACFA390775A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory