General
- Target 2026-08-03_0cd092cd71c1e15319562cdc09e16537_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- Sample260804-d2dzbscc74
- SHA256 7f4066ac5ea9affc19b96474cc0f0f45bfc8e08e65d03785c829782e30cb89a3
- MD5 0cd092cd71c1e15319562cdc09e16537
- SHA1 c3d571e174c8d62e0d41b99686f8a9f372cc845c
- SHA512 0a9bff747b2d00da720db0e38ece4a3ff017308b17ccf86674316bd6674ed72b788663437b95ef5e513790efb8ccbda6199f065662efd092d0af18650beaa0da
- SSDEEP 6144:FcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:FSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T127D45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-03_0cd092cd71c1e15319562cdc09e16537_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_0cd092cd71c1e15319562cdc09e16537_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- SHA256 7f4066ac5ea9affc19b96474cc0f0f45bfc8e08e65d03785c829782e30cb89a3
- MD5 0cd092cd71c1e15319562cdc09e16537
- SHA1 c3d571e174c8d62e0d41b99686f8a9f372cc845c
- SHA512 0a9bff747b2d00da720db0e38ece4a3ff017308b17ccf86674316bd6674ed72b788663437b95ef5e513790efb8ccbda6199f065662efd092d0af18650beaa0da
- SSDEEP 6144:FcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:FSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T127D45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory