General
- Target 2026-08-03_adda56a3fee394b3b781b07235e73223_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- Sample260804-l984fas1ew
- SHA256 06a7693f2d4ff6b66ccfcba3d8b42a3a263fa6b8256904094273461e3e274fed
- MD5 adda56a3fee394b3b781b07235e73223
- SHA1 529f45882ccd06e918b5c5925682bea6f21e00ea
- SHA512 ccb83410204d801745c2050352550e2dcd0007330614c286bd24a2981f095ff3bf9b7a06231cde4205a238db994368d6b6a91f78c968a21af7c77c697ee24904
- SSDEEP 6144:fUJJuV1cdhIoA7vJ0CLoCgvDLe4AmFvirGcEOkCybEaQRuy8K:fYsVOdhElvkCgvDLe4usOkxHy
- TLSH T144C48D29B6D0C036C5B39574C4A186BAEAB17432372549CFA3D5475A0F337E2BA7930E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-03_adda56a3fee394b3b781b07235e73223_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_adda56a3fee394b3b781b07235e73223_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- SHA256 06a7693f2d4ff6b66ccfcba3d8b42a3a263fa6b8256904094273461e3e274fed
- MD5 adda56a3fee394b3b781b07235e73223
- SHA1 529f45882ccd06e918b5c5925682bea6f21e00ea
- SHA512 ccb83410204d801745c2050352550e2dcd0007330614c286bd24a2981f095ff3bf9b7a06231cde4205a238db994368d6b6a91f78c968a21af7c77c697ee24904
- SSDEEP 6144:fUJJuV1cdhIoA7vJ0CLoCgvDLe4AmFvirGcEOkCybEaQRuy8K:fYsVOdhElvkCgvDLe4usOkxHy
- TLSH T144C48D29B6D0C036C5B39574C4A186BAEAB17432372549CFA3D5475A0F337E2BA7930E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory