General
- Target 2026-08-04_d2f1c07bf5d31da7bb7b98fd77db5bf3_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- Sample260804-f1btpade43
- SHA256 08e8fd81f4e5d969c922ba591c6e49a50bcb3a129ae7a446391cc5c21d12d95a
- MD5 d2f1c07bf5d31da7bb7b98fd77db5bf3
- SHA1 45d045c27b4ae8c3c907b2e3cc7b8de0c4f5975c
- SHA512 65f37ea0530fe8bf6b1d6ed8c73439285816525ee7c851ddb1a7b6464b847316c59c91d70d3e12e907ce56fe57dbb6646ff10d8ce68693773bc7dc67cf11d379
- SSDEEP 6144:wcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:wSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T122D45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-04_d2f1c07bf5d31da7bb7b98fd77db5bf3_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_d2f1c07bf5d31da7bb7b98fd77db5bf3_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- SHA256 08e8fd81f4e5d969c922ba591c6e49a50bcb3a129ae7a446391cc5c21d12d95a
- MD5 d2f1c07bf5d31da7bb7b98fd77db5bf3
- SHA1 45d045c27b4ae8c3c907b2e3cc7b8de0c4f5975c
- SHA512 65f37ea0530fe8bf6b1d6ed8c73439285816525ee7c851ddb1a7b6464b847316c59c91d70d3e12e907ce56fe57dbb6646ff10d8ce68693773bc7dc67cf11d379
- SSDEEP 6144:wcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:wSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T122D45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory