General
- Target 2026-08-03_e7e7bf7249322750a4f78167e19f679b_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- Sample260804-k5dw3aweqb
- SHA256 25511d05444b29576e813cb56e6d670302ddb33d2742fa50a02415529a0f1f87
- MD5 e7e7bf7249322750a4f78167e19f679b
- SHA1 f2dbdac10a16a821fac04ae5ee50c0f53af463d5
- SHA512 2fa2b64f6218157e6bceb3739cc32f41a7a46d305575e25dad20ad63210c55e4107434dc74cd1554982ffc544c240df47e232c281427f28c128a84827aad23ff
- SSDEEP 6144:2cTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:2SvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T1C9D45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-03_e7e7bf7249322750a4f78167e19f679b_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_e7e7bf7249322750a4f78167e19f679b_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- SHA256 25511d05444b29576e813cb56e6d670302ddb33d2742fa50a02415529a0f1f87
- MD5 e7e7bf7249322750a4f78167e19f679b
- SHA1 f2dbdac10a16a821fac04ae5ee50c0f53af463d5
- SHA512 2fa2b64f6218157e6bceb3739cc32f41a7a46d305575e25dad20ad63210c55e4107434dc74cd1554982ffc544c240df47e232c281427f28c128a84827aad23ff
- SSDEEP 6144:2cTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:2SvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T1C9D45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory