General
- Target 2026-08-03_1a5ecbaf82311ddd877ef0041b12a770_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- Sample260803-seckbatvhx
- SHA256 b49e1cf09cdde9c8da9fe67bad37ea9b7486e0573f0fe403d3110dfbfe3eb830
- MD5 1a5ecbaf82311ddd877ef0041b12a770
- SHA1 ba218031c34672bfb1aea2070f6334ca8247d545
- SHA512 dc6ea4f7ae88c4b78e68348fe51eef19dc01e25775a5f50603d7da1bb906f1168d963fff5b703b1acd021a1c5f9745b7289d7066148025ce26865ac6e36683fb
- SSDEEP 6144:tUJJuV1cdhIoA7vJ0CLoCgvDLe4AmFvirGcEOkCybEaQRuy8K:tYsVOdhElvkCgvDLe4usOkxHy
- TLSH T167C48D29B6D0C036C5B39574C4A186BAEAB17432372549CFA3D5475A0F337E2BA7930E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-03_1a5ecbaf82311ddd877ef0041b12a770_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_1a5ecbaf82311ddd877ef0041b12a770_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- SHA256 b49e1cf09cdde9c8da9fe67bad37ea9b7486e0573f0fe403d3110dfbfe3eb830
- MD5 1a5ecbaf82311ddd877ef0041b12a770
- SHA1 ba218031c34672bfb1aea2070f6334ca8247d545
- SHA512 dc6ea4f7ae88c4b78e68348fe51eef19dc01e25775a5f50603d7da1bb906f1168d963fff5b703b1acd021a1c5f9745b7289d7066148025ce26865ac6e36683fb
- SSDEEP 6144:tUJJuV1cdhIoA7vJ0CLoCgvDLe4AmFvirGcEOkCybEaQRuy8K:tYsVOdhElvkCgvDLe4usOkxHy
- TLSH T167C48D29B6D0C036C5B39574C4A186BAEAB17432372549CFA3D5475A0F337E2BA7930E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory