General
- Target 2026-08-03_efcdf55a2701947f302a1c5e97dc8e3e_amadey_coinminer_elex_smoke-loader_stop
- Size 766KB
- Sample260803-mvefysvdkh
- SHA256 4fd87f9b91b7866ebad29a03b34ae33162b18335b50353782613097c24791803
- MD5 efcdf55a2701947f302a1c5e97dc8e3e
- SHA1 6f4507dba07634ac61a361d66e80603879fdf63b
- SHA512 3987d47f311b2d7211104ad7abdf318a7a3d1de17840711e18031488dd3e3b230d38ef9e9cf7fed3713726316b6e010acf2b48a702632e0cd0816163f7132c6d
- SSDEEP 12288:uSvO2x9mONvKRwLSFtsOkx2LIa+ya5FAQjU/Liw:NvO2xJKRw2kOkx2LFRvcUV
- TLSH T192F45A31E241C03AD0A74576C6FA0BAFE564BD25531155CBA3C43A6A2FB36D2BE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-03_efcdf55a2701947f302a1c5e97dc8e3e_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_efcdf55a2701947f302a1c5e97dc8e3e_amadey_coinminer_elex_smoke-loader_stop
- Size 766KB
- SHA256 4fd87f9b91b7866ebad29a03b34ae33162b18335b50353782613097c24791803
- MD5 efcdf55a2701947f302a1c5e97dc8e3e
- SHA1 6f4507dba07634ac61a361d66e80603879fdf63b
- SHA512 3987d47f311b2d7211104ad7abdf318a7a3d1de17840711e18031488dd3e3b230d38ef9e9cf7fed3713726316b6e010acf2b48a702632e0cd0816163f7132c6d
- SSDEEP 12288:uSvO2x9mONvKRwLSFtsOkx2LIa+ya5FAQjU/Liw:NvO2xJKRw2kOkx2LFRvcUV
- TLSH T192F45A31E241C03AD0A74576C6FA0BAFE564BD25531155CBA3C43A6A2FB36D2BE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory