General
- Target 2026-08-03_9593517b23e350ca009db6f735790e8b_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- Sample260804-mtckzacr3w
- SHA256 7d772c401da9c4ef1d21e927ae78ca3edc8adf1b7a38356f6546a8d56389d026
- MD5 9593517b23e350ca009db6f735790e8b
- SHA1 ab83b7bdb8b5af7cb3832ef797dc3dc8c2cd7238
- SHA512 5c8d154105fafb0cd7e3dd4de597573782ef8403e71aec72dc7c2079319f9e29acfa3ecba7177d31a229c4d5b03dd1478bc614dcc39efdbf74ccbcc71943264d
- SSDEEP 6144:kWVrC1c2oonALgPLj7vf1LKlyIFVirGcEOkCybEaQRuy8K:kkCO2zVPX7vf1LKlIsOkxHy
- TLSH T18AC47C29B690D076C4779574C4A187AAFAB1B432372449CFB3D00B5A1F237E2BA7530E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-03_9593517b23e350ca009db6f735790e8b_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_9593517b23e350ca009db6f735790e8b_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- SHA256 7d772c401da9c4ef1d21e927ae78ca3edc8adf1b7a38356f6546a8d56389d026
- MD5 9593517b23e350ca009db6f735790e8b
- SHA1 ab83b7bdb8b5af7cb3832ef797dc3dc8c2cd7238
- SHA512 5c8d154105fafb0cd7e3dd4de597573782ef8403e71aec72dc7c2079319f9e29acfa3ecba7177d31a229c4d5b03dd1478bc614dcc39efdbf74ccbcc71943264d
- SSDEEP 6144:kWVrC1c2oonALgPLj7vf1LKlyIFVirGcEOkCybEaQRuy8K:kkCO2zVPX7vf1LKlIsOkxHy
- TLSH T18AC47C29B690D076C4779574C4A187AAFAB1B432372449CFB3D00B5A1F237E2BA7530E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory