General
- Target 2026-08-03_f112ce429920fc6e78b1a0f9dd8a1496_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- Sample260804-kzcf2s1za1
- SHA256 7d591f6cc2b4af8698d6c3032cbb85a875951171e5f4c47855b7a532763b8e83
- MD5 f112ce429920fc6e78b1a0f9dd8a1496
- SHA1 206c707e65bf6a87809dbc46637da0d2a0be1171
- SHA512 c7019a6682a8aa47e8fff861b463bc8764f047643607d2c88129c33aab8fff8d7aeb38fceee803da7b73d3b734436ac205905d57ae30a9348448b4e9e5bc2f43
- SSDEEP 6144:6cTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:6SvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T1ABD45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-03_f112ce429920fc6e78b1a0f9dd8a1496_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_f112ce429920fc6e78b1a0f9dd8a1496_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- SHA256 7d591f6cc2b4af8698d6c3032cbb85a875951171e5f4c47855b7a532763b8e83
- MD5 f112ce429920fc6e78b1a0f9dd8a1496
- SHA1 206c707e65bf6a87809dbc46637da0d2a0be1171
- SHA512 c7019a6682a8aa47e8fff861b463bc8764f047643607d2c88129c33aab8fff8d7aeb38fceee803da7b73d3b734436ac205905d57ae30a9348448b4e9e5bc2f43
- SSDEEP 6144:6cTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:6SvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T1ABD45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory