General
- Target 2026-08-03_8d4fba9d35ec965cb8668c003b0ab8d3_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- Sample260804-myw56sybja
- SHA256 638b0453ebbb948c8ba69523f4c797a09edb1964f1543cc9bed3cf5876f95ed0
- MD5 8d4fba9d35ec965cb8668c003b0ab8d3
- SHA1 c45105b0d7f2cdacbcec115c06b9d2fa4de61fa0
- SHA512 c894afa45f77a9aab89c9cc78ee31f358e5e6bcfad4bd4423728731aa767e415665f158d5d4f58d062e94a96e52b58247ce48b7cf2be63fd41c1a9ab9dab9396
- SSDEEP 6144:84ZaN1cb90oOTFmIFLq0cvnXhLCqj2EFNirGcEOkCybEaQRuy8K:8rNOb9+sIF+0cvnXhLCqEsOkxHy
- TLSH T13EC48D29B6E0C076C4B79578C4A186B6FAB17832372459CFA394075A1F337E2BA3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-03_8d4fba9d35ec965cb8668c003b0ab8d3_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_8d4fba9d35ec965cb8668c003b0ab8d3_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- SHA256 638b0453ebbb948c8ba69523f4c797a09edb1964f1543cc9bed3cf5876f95ed0
- MD5 8d4fba9d35ec965cb8668c003b0ab8d3
- SHA1 c45105b0d7f2cdacbcec115c06b9d2fa4de61fa0
- SHA512 c894afa45f77a9aab89c9cc78ee31f358e5e6bcfad4bd4423728731aa767e415665f158d5d4f58d062e94a96e52b58247ce48b7cf2be63fd41c1a9ab9dab9396
- SSDEEP 6144:84ZaN1cb90oOTFmIFLq0cvnXhLCqj2EFNirGcEOkCybEaQRuy8K:8rNOb9+sIF+0cvnXhLCqEsOkxHy
- TLSH T13EC48D29B6E0C076C4B79578C4A186B6FAB17832372459CFA394075A1F337E2BA3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory