General
- Target 2026-08-03_4f1f0c7bc9b7fb15411da7afd24c9852_amadey_coinminer_elex_smoke-loader_stop
- Size 576KB
- Sample260804-n7fp8adr8x
- SHA256 51dfdcd3feb60c860bb50ab8fa4eb3ef5333825eb38f1b6708922ec11a301902
- MD5 4f1f0c7bc9b7fb15411da7afd24c9852
- SHA1 bc2e3c39c3f39c5f66c05075b06be9133021f707
- SHA512 a6ba26a7bdfcd653f26a32931ab74777ac74bdc9a91ce8597c0bbc1918b144bdf45746e74a9b0b292726c4c7e792266ccf8e5b86e6d585389514f66f2eb2d4de
- SSDEEP 6144:6cTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K/:6SvO2x9mONvKRwLSFtsOkx2LIa+yx
- TLSH T162C46D26B6908072C4779578C4A257AAFBB1BC2127204ACFA390775A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-03_4f1f0c7bc9b7fb15411da7afd24c9852_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_4f1f0c7bc9b7fb15411da7afd24c9852_amadey_coinminer_elex_smoke-loader_stop
- Size 576KB
- SHA256 51dfdcd3feb60c860bb50ab8fa4eb3ef5333825eb38f1b6708922ec11a301902
- MD5 4f1f0c7bc9b7fb15411da7afd24c9852
- SHA1 bc2e3c39c3f39c5f66c05075b06be9133021f707
- SHA512 a6ba26a7bdfcd653f26a32931ab74777ac74bdc9a91ce8597c0bbc1918b144bdf45746e74a9b0b292726c4c7e792266ccf8e5b86e6d585389514f66f2eb2d4de
- SSDEEP 6144:6cTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K/:6SvO2x9mONvKRwLSFtsOkx2LIa+yx
- TLSH T162C46D26B6908072C4779578C4A257AAFBB1BC2127204ACFA390775A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory