General
- Target 2026-08-04_51b03175ae97aa5efb4d0046df61d7d8_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- Sample260804-h5eggsaj2v
- SHA256 e295d9aaad989deb9163f37fcc317735be516b27d2d947090c0bca22e20db584
- MD5 51b03175ae97aa5efb4d0046df61d7d8
- SHA1 feb06130a0a553af5c9ffe4b3eb2931565657d1f
- SHA512 42f70dacf25db0aca871022edbea41f2b0d3867ba48d1d247d82726df7904e9b841ad04250506e7fecf0822f84323e59ff76eb3fbd865779ce980d0beb902c06
- SSDEEP 6144:yWVrC1c2oonALgPLj7vf1LKlyIFVirGcEOkCybEaQRuy8K:ykCO2zVPX7vf1LKlIsOkxHy
- TLSH T150C47C29B690D076C4779574C4A187AAFAB1B432372449CFB3D00B5A1F237E2BA7530E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-04_51b03175ae97aa5efb4d0046df61d7d8_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_51b03175ae97aa5efb4d0046df61d7d8_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- SHA256 e295d9aaad989deb9163f37fcc317735be516b27d2d947090c0bca22e20db584
- MD5 51b03175ae97aa5efb4d0046df61d7d8
- SHA1 feb06130a0a553af5c9ffe4b3eb2931565657d1f
- SHA512 42f70dacf25db0aca871022edbea41f2b0d3867ba48d1d247d82726df7904e9b841ad04250506e7fecf0822f84323e59ff76eb3fbd865779ce980d0beb902c06
- SSDEEP 6144:yWVrC1c2oonALgPLj7vf1LKlyIFVirGcEOkCybEaQRuy8K:ykCO2zVPX7vf1LKlIsOkxHy
- TLSH T150C47C29B690D076C4779574C4A187AAFAB1B432372449CFB3D00B5A1F237E2BA7530E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory