General
- Target 2026-08-04_81e3d9f6849f6facc05abb59b6f658f8_amadey_coinminer_elex_smoke-loader_stop
- Size 615KB
- Sample260804-hckssstaqc
- SHA256 3e418e4c2b97558505ced0ba5ded84ea0f9ecf94c60346d3ffce32372d199a69
- MD5 81e3d9f6849f6facc05abb59b6f658f8
- SHA1 dd1883a497326bd07c8f6ed6837d0ab5e48a9cab
- SHA512 01623b054e50dbc317d557f72a2446c0365860d157c5c9d22fe74dae8cc251d8178d9ba912da2fa5a8d53791fcb652f2fd03e41f5e8e317ecfe01b2f1b9de3ca
- SSDEEP 12288:ySvO2x9mONvKRILSFnOkx2LIax5FAQjU/Liw:ZvO2xJKRI2FOkx2LFicUV
- TLSH T179D44A31E241C03AD4A74576C6FA0BAFE5647D25531165CBA3C43A2A2FB36D2BE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_81e3d9f6849f6facc05abb59b6f658f8_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_81e3d9f6849f6facc05abb59b6f658f8_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_81e3d9f6849f6facc05abb59b6f658f8_amadey_coinminer_elex_smoke-loader_stop
- Size 615KB
- SHA256 3e418e4c2b97558505ced0ba5ded84ea0f9ecf94c60346d3ffce32372d199a69
- MD5 81e3d9f6849f6facc05abb59b6f658f8
- SHA1 dd1883a497326bd07c8f6ed6837d0ab5e48a9cab
- SHA512 01623b054e50dbc317d557f72a2446c0365860d157c5c9d22fe74dae8cc251d8178d9ba912da2fa5a8d53791fcb652f2fd03e41f5e8e317ecfe01b2f1b9de3ca
- SSDEEP 12288:ySvO2x9mONvKRILSFnOkx2LIax5FAQjU/Liw:ZvO2xJKRI2FOkx2LFicUV
- TLSH T179D44A31E241C03AD4A74576C6FA0BAFE5647D25531165CBA3C43A2A2FB36D2BE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory