General
- Target 2026-08-04_11d5f6e6c4d208e896151637b9ddf05a_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- Sample260804-j8cyhazyfs
- SHA256 7f6b8908225a126e6db46f4b2d71c67d3f5df9bb553818ea8976a819f03ef518
- MD5 11d5f6e6c4d208e896151637b9ddf05a
- SHA1 71f909b86ad3e652af9dded32d577cf51b2fb374
- SHA512 3af2d704c5c95283ca1f8b4a37c748eebb15fa5b9826d56aa8d934411858c715c75a9a1fa25772cb127f91b16c303af9f756ca5b05e579b39b9d7654c81f24cc
- SSDEEP 6144:dcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:dSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T14AD45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-04_11d5f6e6c4d208e896151637b9ddf05a_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_11d5f6e6c4d208e896151637b9ddf05a_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- SHA256 7f6b8908225a126e6db46f4b2d71c67d3f5df9bb553818ea8976a819f03ef518
- MD5 11d5f6e6c4d208e896151637b9ddf05a
- SHA1 71f909b86ad3e652af9dded32d577cf51b2fb374
- SHA512 3af2d704c5c95283ca1f8b4a37c748eebb15fa5b9826d56aa8d934411858c715c75a9a1fa25772cb127f91b16c303af9f756ca5b05e579b39b9d7654c81f24cc
- SSDEEP 6144:dcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:dSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T14AD45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory