General
- Target 2026-08-04_d6cfcfee3b7cec26084af5ecaf7dcee3_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- Sample260804-15bpps1gjc
- SHA256 bbeafc15b9f6e30c79e6ff0c348ecf27b4376c70fb67cd9c428c65ea3b31e769
- MD5 d6cfcfee3b7cec26084af5ecaf7dcee3
- SHA1 8924f23bae145cafef74ddc17b0a97d6425b9cd9
- SHA512 6d6d8ab6ec9dc670b8d48d4cce32ad9bde1082d528139f91f731b83565a4a1b734deab50df6b275773b8b142b0817334506d4f434a528595d850eb6e4468dedb
- SSDEEP 6144:DcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:DSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T1EAD45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-04_d6cfcfee3b7cec26084af5ecaf7dcee3_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_d6cfcfee3b7cec26084af5ecaf7dcee3_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- SHA256 bbeafc15b9f6e30c79e6ff0c348ecf27b4376c70fb67cd9c428c65ea3b31e769
- MD5 d6cfcfee3b7cec26084af5ecaf7dcee3
- SHA1 8924f23bae145cafef74ddc17b0a97d6425b9cd9
- SHA512 6d6d8ab6ec9dc670b8d48d4cce32ad9bde1082d528139f91f731b83565a4a1b734deab50df6b275773b8b142b0817334506d4f434a528595d850eb6e4468dedb
- SSDEEP 6144:DcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:DSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T1EAD45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory