General
- Target 2026-08-03_a6a9d06874ea98339899aabe1abb9636_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- Sample260803-nenv5axwdy
- SHA256 7589303d83b705f8e1ad4c4fabefcd86a9343f72f77524ff867eafc9c5eeea0a
- MD5 a6a9d06874ea98339899aabe1abb9636
- SHA1 feb884ed7b00302442cd6c5682faf69e9e090bd8
- SHA512 ae5f9d30e78460ba6538d13b5fca4f01f24ed16349e6e1f759f6758f5581ee14210830b778988834ea3637d5ab3d4cfd9e76f99b42fd56194b21639d34fefa5c
- SSDEEP 6144:QcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:QSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T1C8D45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-03_a6a9d06874ea98339899aabe1abb9636_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_a6a9d06874ea98339899aabe1abb9636_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- SHA256 7589303d83b705f8e1ad4c4fabefcd86a9343f72f77524ff867eafc9c5eeea0a
- MD5 a6a9d06874ea98339899aabe1abb9636
- SHA1 feb884ed7b00302442cd6c5682faf69e9e090bd8
- SHA512 ae5f9d30e78460ba6538d13b5fca4f01f24ed16349e6e1f759f6758f5581ee14210830b778988834ea3637d5ab3d4cfd9e76f99b42fd56194b21639d34fefa5c
- SSDEEP 6144:QcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:QSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T1C8D45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory