General
- Target 2026-08-03_facae0418c784b3bd9ee2ad689950e20_amadey_coinminer_elex_smoke-loader_stop
- Size 525KB
- Sample260803-tv2ptafj3w
- SHA256 2c3b7b63ef4c3670845715c6d6783bc2a41f8125064c2cf248995a5a264bc271
- MD5 facae0418c784b3bd9ee2ad689950e20
- SHA1 8d656941ec95b17a00f09dd405bbe98c06279f32
- SHA512 943176bf57b7425a7810a0a132ffddec52b8167a70a20fc75c0352ee5111fcf2ee8bd48f1c26de3e31431c3d3c04ff42daa75c1e28fa91356171f721b60bd414
- SSDEEP 6144:JcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K:JSvO2x9mONvKRwLSFtsOkx2LIa+y
- TLSH T195B47D2AB6A0D076C4779579C4A257BAFBB1742137204ACFA390475A1F237E2BE3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-03_facae0418c784b3bd9ee2ad689950e20_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_facae0418c784b3bd9ee2ad689950e20_amadey_coinminer_elex_smoke-loader_stop
- Size 525KB
- SHA256 2c3b7b63ef4c3670845715c6d6783bc2a41f8125064c2cf248995a5a264bc271
- MD5 facae0418c784b3bd9ee2ad689950e20
- SHA1 8d656941ec95b17a00f09dd405bbe98c06279f32
- SHA512 943176bf57b7425a7810a0a132ffddec52b8167a70a20fc75c0352ee5111fcf2ee8bd48f1c26de3e31431c3d3c04ff42daa75c1e28fa91356171f721b60bd414
- SSDEEP 6144:JcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K:JSvO2x9mONvKRwLSFtsOkx2LIa+y
- TLSH T195B47D2AB6A0D076C4779579C4A257BAFBB1742137204ACFA390475A1F237E2BE3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory