General
- Target 2026-08-04_be3b36d5eacd2ad079c5be28874270dd_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- Sample260804-ga8leawzb1
- SHA256 a49536c360f02d761ba3aa0240ced4f8bb1c5f0eea5d267e3a08265676b2aa74
- MD5 be3b36d5eacd2ad079c5be28874270dd
- SHA1 e7594543e80016a34b8f88a5f57343ea52ef5582
- SHA512 f7201bcf776afa8c2a8118950f7f70eefb2acd7c90801c99ac78b00a611e464a9aaca1e9215db271619ac22863e1bac1484bf0e8ff43a4a383f0e36c522eabb3
- SSDEEP 6144:bcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:bSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T1E7D45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-04_be3b36d5eacd2ad079c5be28874270dd_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_be3b36d5eacd2ad079c5be28874270dd_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- SHA256 a49536c360f02d761ba3aa0240ced4f8bb1c5f0eea5d267e3a08265676b2aa74
- MD5 be3b36d5eacd2ad079c5be28874270dd
- SHA1 e7594543e80016a34b8f88a5f57343ea52ef5582
- SHA512 f7201bcf776afa8c2a8118950f7f70eefb2acd7c90801c99ac78b00a611e464a9aaca1e9215db271619ac22863e1bac1484bf0e8ff43a4a383f0e36c522eabb3
- SSDEEP 6144:bcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:bSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T1E7D45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory