General
- Target 2026-08-03_4dc705a840c240329d64f5526e0fd40f_amadey_coinminer_elex_smoke-loader_stop
- Size 525KB
- Sample260804-n79nasv1ey
- SHA256 43679a8af9df7d2befff7369551b5bd1f6d931917c12a372f273c4e20c4f5c83
- MD5 4dc705a840c240329d64f5526e0fd40f
- SHA1 f2061c3f05f8d063b72188857fe7e3308e87631d
- SHA512 3d206e631335e9496835a26b578b3d7606c713fb9092207c92a1aeb2c211c5ad519bb133fcdd134154a436e7ba09f2be730311c7c0128243cfc7364e70d55514
- SSDEEP 6144:t2cTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K:oSvO2x9mONvKRwLSFtsOkx2LIa+y
- TLSH T13EB47D2AB6A0D076C4779579C4A257BAFBB1742137204ACFA390475A1F237E2BE3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-03_4dc705a840c240329d64f5526e0fd40f_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_4dc705a840c240329d64f5526e0fd40f_amadey_coinminer_elex_smoke-loader_stop
- Size 525KB
- SHA256 43679a8af9df7d2befff7369551b5bd1f6d931917c12a372f273c4e20c4f5c83
- MD5 4dc705a840c240329d64f5526e0fd40f
- SHA1 f2061c3f05f8d063b72188857fe7e3308e87631d
- SHA512 3d206e631335e9496835a26b578b3d7606c713fb9092207c92a1aeb2c211c5ad519bb133fcdd134154a436e7ba09f2be730311c7c0128243cfc7364e70d55514
- SSDEEP 6144:t2cTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K:oSvO2x9mONvKRwLSFtsOkx2LIa+y
- TLSH T13EB47D2AB6A0D076C4779579C4A257BAFBB1742137204ACFA390475A1F237E2BE3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory