General
- Target 2026-08-03_870d3a065196201b442004babaa04726_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- Sample260804-m4fqdatzbv
- SHA256 07900b4bd9838659654954e5e1ef34c6529f95ef3e100a25bf28509b038b073f
- MD5 870d3a065196201b442004babaa04726
- SHA1 69d06f3a54edc432b4695b7b8d20357804baa177
- SHA512 8025f7318a9c7e499ef99c3bf9ac9752b2e5dd52b79bdc82b64a02ced43e7fe8b2992117168e675c17e9232ab4e60da59f4aece378e5a47d09f544dd9168154f
- SSDEEP 6144:CWVrC1c2oonALgPLj7vf1LKlyIFVirGcEOkCybEaQRXr9HNdvOa+y8K:CkCO2zVPX7vf1LKlIsOkx2LIa+y
- TLSH T14EC47C2AF6A0C036C4779574C4A257AAFFB1B42127204ACFA390475A1F637E2BE7531D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-03_870d3a065196201b442004babaa04726_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_870d3a065196201b442004babaa04726_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- SHA256 07900b4bd9838659654954e5e1ef34c6529f95ef3e100a25bf28509b038b073f
- MD5 870d3a065196201b442004babaa04726
- SHA1 69d06f3a54edc432b4695b7b8d20357804baa177
- SHA512 8025f7318a9c7e499ef99c3bf9ac9752b2e5dd52b79bdc82b64a02ced43e7fe8b2992117168e675c17e9232ab4e60da59f4aece378e5a47d09f544dd9168154f
- SSDEEP 6144:CWVrC1c2oonALgPLj7vf1LKlyIFVirGcEOkCybEaQRXr9HNdvOa+y8K:CkCO2zVPX7vf1LKlIsOkx2LIa+y
- TLSH T14EC47C2AF6A0C036C4779574C4A257AAFFB1B42127204ACFA390475A1F637E2BE7531D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory