General
- Target 2026-08-04_1c0ecbf47c9b2f4c7aeb4c9d54a5e0ff_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- Sample260804-j11plaap3v
- SHA256 0801161cece2eb58792afa6b778491eb7b034444069443b194b410ff64f3ffb5
- MD5 1c0ecbf47c9b2f4c7aeb4c9d54a5e0ff
- SHA1 df2a03b086850e513c37d22af9eb4f65030c21dd
- SHA512 0c6269bf24263fd789e8eaa9307d7e14806c18b201dc23ccbc8e82db97d0f646916d7a99ead1284c04239bab03488291dd3fd090d03b66340ce3846c07b80161
- SSDEEP 6144:tUJJuV1cdhIoA7vJ0CLoCgvDLe4AmFvirGcEOkCybEaQRuy8K:tYsVOdhElvkCgvDLe4usOkxHy
- TLSH T149C48D29B6D0C036C5B39574C4A186BAEAB17432372549CFA3D5475A0F337E2BA7930E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-04_1c0ecbf47c9b2f4c7aeb4c9d54a5e0ff_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_1c0ecbf47c9b2f4c7aeb4c9d54a5e0ff_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- SHA256 0801161cece2eb58792afa6b778491eb7b034444069443b194b410ff64f3ffb5
- MD5 1c0ecbf47c9b2f4c7aeb4c9d54a5e0ff
- SHA1 df2a03b086850e513c37d22af9eb4f65030c21dd
- SHA512 0c6269bf24263fd789e8eaa9307d7e14806c18b201dc23ccbc8e82db97d0f646916d7a99ead1284c04239bab03488291dd3fd090d03b66340ce3846c07b80161
- SSDEEP 6144:tUJJuV1cdhIoA7vJ0CLoCgvDLe4AmFvirGcEOkCybEaQRuy8K:tYsVOdhElvkCgvDLe4usOkxHy
- TLSH T149C48D29B6D0C036C5B39574C4A186BAEAB17432372549CFA3D5475A0F337E2BA7930E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory