General
- Target 2026-08-03_18f49f9e10c591fdb6d0f797e021ea76_amadey_coinminer_elex_smoke-loader_stop
- Size 525KB
- Sample260804-dv7cascb86
- SHA256 5aef3a1f048bf68c732c3cb3d0f6fc2c997ccf1f0a7563633732b773acda63e7
- MD5 18f49f9e10c591fdb6d0f797e021ea76
- SHA1 8c820fbe6222155bd0b610fbb5fde18bef71f5ca
- SHA512 f3ccb002a87c7aea209e2a10c68a16a468bfb20bc2d20862884bebfebf600f9fb75dc04e7eae4f829ed0cc0c9c8c4e25957ee00335784211d8ec47034e7187ce
- SSDEEP 6144:hcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K:hSvO2x9mONvKRwLSFtsOkx2LIa+y
- TLSH T19EB47D2AB6A0D076C4779579C4A257BAFBB1742137204ACFA390475A1F237E2BE3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-03_18f49f9e10c591fdb6d0f797e021ea76_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_18f49f9e10c591fdb6d0f797e021ea76_amadey_coinminer_elex_smoke-loader_stop
- Size 525KB
- SHA256 5aef3a1f048bf68c732c3cb3d0f6fc2c997ccf1f0a7563633732b773acda63e7
- MD5 18f49f9e10c591fdb6d0f797e021ea76
- SHA1 8c820fbe6222155bd0b610fbb5fde18bef71f5ca
- SHA512 f3ccb002a87c7aea209e2a10c68a16a468bfb20bc2d20862884bebfebf600f9fb75dc04e7eae4f829ed0cc0c9c8c4e25957ee00335784211d8ec47034e7187ce
- SSDEEP 6144:hcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K:hSvO2x9mONvKRwLSFtsOkx2LIa+y
- TLSH T19EB47D2AB6A0D076C4779579C4A257BAFBB1742137204ACFA390475A1F237E2BE3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory