General
- Target 2026-08-03_c415deeebada40236e30ec7815d93628_amadey_coinminer_elex_smoke-loader_stop
- Size 525KB
- Sample260803-m7deesvgle
- SHA256 f3f6fbb4e9fc83ec96ad83a25fd65c9bcecee313d3d976221eafba2109414a1a
- MD5 c415deeebada40236e30ec7815d93628
- SHA1 e8906f744acb51b604566671b49c5977ee59d45b
- SHA512 c70941aaa4a903a86e9033874a11156b0a8286f56f20f300cb042b456cdcb07f3dc0febb5c7ed06f01b0b764551397cbc8ca82fb6231465d238997892fa79c20
- SSDEEP 6144:rcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K:rSvO2x9mONvKRwLSFtsOkx2LIa+y
- TLSH T10BB47D2AB6A0D076C4779579C4A257BAFBB1742137204ACFA390475A1F237E2BE3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-03_c415deeebada40236e30ec7815d93628_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_c415deeebada40236e30ec7815d93628_amadey_coinminer_elex_smoke-loader_stop
- Size 525KB
- SHA256 f3f6fbb4e9fc83ec96ad83a25fd65c9bcecee313d3d976221eafba2109414a1a
- MD5 c415deeebada40236e30ec7815d93628
- SHA1 e8906f744acb51b604566671b49c5977ee59d45b
- SHA512 c70941aaa4a903a86e9033874a11156b0a8286f56f20f300cb042b456cdcb07f3dc0febb5c7ed06f01b0b764551397cbc8ca82fb6231465d238997892fa79c20
- SSDEEP 6144:rcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K:rSvO2x9mONvKRwLSFtsOkx2LIa+y
- TLSH T10BB47D2AB6A0D076C4779579C4A257BAFBB1742137204ACFA390475A1F237E2BE3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory