General
- Target 2026-08-04_5b4609bee5254d38c1a71ca0d60c6b2b_amadey_coinminer_elex_smoke-loader_stop
- Size 761KB
- Sample260804-hzh8gsfa38
- SHA256 87f21502bd1340ad3295485bca7b3ee590c78b781756a7d5cad6658a734ce8e9
- MD5 5b4609bee5254d38c1a71ca0d60c6b2b
- SHA1 46f412ee4f52a877ca487618580782680dd40f33
- SHA512 6637485f885fc64b06e3e19748dcfc93c2d66c7f452f0b4bac723eee803b08d81d5cf940ac31c56577179a5f61b0274aa1a46b48d1ae3960be8d329d3b85776a
- SSDEEP 12288:JSvO2x9mONvKRwLSFtsOkxHya5hYIW0p98B:wvO2xJKRw2kOkxSkW298B
- TLSH T13BF49E35A2808036C0B34532C6F94AABF9797D35631565CBA3843B662F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-04_5b4609bee5254d38c1a71ca0d60c6b2b_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_5b4609bee5254d38c1a71ca0d60c6b2b_amadey_coinminer_elex_smoke-loader_stop
- Size 761KB
- SHA256 87f21502bd1340ad3295485bca7b3ee590c78b781756a7d5cad6658a734ce8e9
- MD5 5b4609bee5254d38c1a71ca0d60c6b2b
- SHA1 46f412ee4f52a877ca487618580782680dd40f33
- SHA512 6637485f885fc64b06e3e19748dcfc93c2d66c7f452f0b4bac723eee803b08d81d5cf940ac31c56577179a5f61b0274aa1a46b48d1ae3960be8d329d3b85776a
- SSDEEP 12288:JSvO2x9mONvKRwLSFtsOkxHya5hYIW0p98B:wvO2xJKRw2kOkxSkW298B
- TLSH T13BF49E35A2808036C0B34532C6F94AABF9797D35631565CBA3843B662F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory