General
- Target 2026-08-03_7080c8197d814192d7c835f6e1215292_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- Sample260804-nhzf2aac46
- SHA256 59f06291f73656739dd5f56a0337ec94f1ca44a5351c5cf13f03b6c58318e2d1
- MD5 7080c8197d814192d7c835f6e1215292
- SHA1 dc1071fc19d6e64c75d8562b42d495da61b93498
- SHA512 21b262f4170c50242e26189cf47c1b283b9f424b360772b9253800ac317478ea113dce58096158ee9a0c95c926ee68d9226515f6d6f9deb41255319c9999dce1
- SSDEEP 6144:44ZaN1cb90oOTFmIFLq0cvnXhLCqj2EFNirGcEOkCybEaQRuy8K:4rNOb9+sIF+0cvnXhLCqEsOkxHy
- TLSH T14CC48D29B6E0C076C4B79578C4A186B6FAB17832372459CFA394075A1F337E2BA3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-03_7080c8197d814192d7c835f6e1215292_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_7080c8197d814192d7c835f6e1215292_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- SHA256 59f06291f73656739dd5f56a0337ec94f1ca44a5351c5cf13f03b6c58318e2d1
- MD5 7080c8197d814192d7c835f6e1215292
- SHA1 dc1071fc19d6e64c75d8562b42d495da61b93498
- SHA512 21b262f4170c50242e26189cf47c1b283b9f424b360772b9253800ac317478ea113dce58096158ee9a0c95c926ee68d9226515f6d6f9deb41255319c9999dce1
- SSDEEP 6144:44ZaN1cb90oOTFmIFLq0cvnXhLCqj2EFNirGcEOkCybEaQRuy8K:4rNOb9+sIF+0cvnXhLCqEsOkxHy
- TLSH T14CC48D29B6E0C076C4B79578C4A186B6FAB17832372459CFA394075A1F337E2BA3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory