General
- Target 2026-08-04_85ec1e03bc57b9baae2958c3d283ac36_amadey_coinminer_elex_smoke-loader_stop
- Size 766KB
- Sample260804-g9kzdstalc
- SHA256 75df55982c4efe1016b135c715b87bb93c24a631b7f2f5e8ef137604d32f0f2e
- MD5 85ec1e03bc57b9baae2958c3d283ac36
- SHA1 c10d8ddb37a5ee3b43e8953d0478fb4fc3a4bcec
- SHA512 76635f1b61b44d8c5b3730d50c78dd966c24674acd3a895ef1c50864a328dd23582894583b99fc4870ef6965cf2b99ca26dad5b0d51f9f7dbcac2b20cb6c3bd0
- SSDEEP 12288:uSvO2x9mONvKRwLSFtsOkx2LIa+ya5FAQjU/Liw:NvO2xJKRw2kOkx2LFRvcUV
- TLSH T109F45A31E241C03AD0A74576C6FA0BAFE564BD25531155CBA3C43A6A2FB36D2BE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-04_85ec1e03bc57b9baae2958c3d283ac36_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_85ec1e03bc57b9baae2958c3d283ac36_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_85ec1e03bc57b9baae2958c3d283ac36_amadey_coinminer_elex_smoke-loader_stop
- Size 766KB
- SHA256 75df55982c4efe1016b135c715b87bb93c24a631b7f2f5e8ef137604d32f0f2e
- MD5 85ec1e03bc57b9baae2958c3d283ac36
- SHA1 c10d8ddb37a5ee3b43e8953d0478fb4fc3a4bcec
- SHA512 76635f1b61b44d8c5b3730d50c78dd966c24674acd3a895ef1c50864a328dd23582894583b99fc4870ef6965cf2b99ca26dad5b0d51f9f7dbcac2b20cb6c3bd0
- SSDEEP 12288:uSvO2x9mONvKRwLSFtsOkx2LIa+ya5FAQjU/Liw:NvO2xJKRw2kOkx2LFRvcUV
- TLSH T109F45A31E241C03AD0A74576C6FA0BAFE564BD25531155CBA3C43A6A2FB36D2BE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory