General
- Target 2026-08-03_6f47f763f76a365cb3b79c56c9e123f7_amadey_coinminer_elex_smoke-loader_stop
- Size 615KB
- Sample260803-wffvxagn7z
- SHA256 cfb0c7e26c4250f80dce029417e06c6e0c88df7c7c94263936dec3f871366124
- MD5 6f47f763f76a365cb3b79c56c9e123f7
- SHA1 dafa26802a0c31fda2c863d43a77ad42f96de0f9
- SHA512 775da319013343ba15f711e13cd32367c82ce57c9f745e747296faa748511934fc03297829e2d18db1658050d86d316c67a14b3fb76c255cc9e31eab829de587
- SSDEEP 12288:KSvO2x9mONvKRILSFnOkx2LIax5FAQjU/Liw:RvO2xJKRI2FOkx2LFicUV
- TLSH T100D44A31E241C03AD4A74576C6FA0BAFE5647D25531165CBA3C43A2A2FB36D2BE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_6f47f763f76a365cb3b79c56c9e123f7_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_6f47f763f76a365cb3b79c56c9e123f7_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_6f47f763f76a365cb3b79c56c9e123f7_amadey_coinminer_elex_smoke-loader_stop
- Size 615KB
- SHA256 cfb0c7e26c4250f80dce029417e06c6e0c88df7c7c94263936dec3f871366124
- MD5 6f47f763f76a365cb3b79c56c9e123f7
- SHA1 dafa26802a0c31fda2c863d43a77ad42f96de0f9
- SHA512 775da319013343ba15f711e13cd32367c82ce57c9f745e747296faa748511934fc03297829e2d18db1658050d86d316c67a14b3fb76c255cc9e31eab829de587
- SSDEEP 12288:KSvO2x9mONvKRILSFnOkx2LIax5FAQjU/Liw:RvO2xJKRI2FOkx2LFicUV
- TLSH T100D44A31E241C03AD4A74576C6FA0BAFE5647D25531165CBA3C43A2A2FB36D2BE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory