General
- Target 2026-08-03_66ec718e537e5af235a271dca02d1703_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- Sample260804-np576avwb1
- SHA256 4c17b4fe9f2d7636e9d7b06f604d64a0f4b624a18589e0fcdf0a22e76763ad67
- MD5 66ec718e537e5af235a271dca02d1703
- SHA1 67486f8689697310c1538c38291f272223c8b3d8
- SHA512 a0f159759a81bbf09cdc76436e1f39f6987ff5e5ee0af26407eebb4dcbc441db491029112d92393fc520e31568c0ddcd5dc54b4763d9aba8e2535f89dee4ffed
- SSDEEP 6144:XUJJuV1cdhIoA7vJ0CLoCgvDLe4AmFvirGcEOkCybEaQRuy8K:XYsVOdhElvkCgvDLe4usOkxHy
- TLSH T118C48D29B6D0C036C5B39574C4A186BAEAB17432372549CFA3D5475A0F337E2BA7930E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-03_66ec718e537e5af235a271dca02d1703_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_66ec718e537e5af235a271dca02d1703_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- SHA256 4c17b4fe9f2d7636e9d7b06f604d64a0f4b624a18589e0fcdf0a22e76763ad67
- MD5 66ec718e537e5af235a271dca02d1703
- SHA1 67486f8689697310c1538c38291f272223c8b3d8
- SHA512 a0f159759a81bbf09cdc76436e1f39f6987ff5e5ee0af26407eebb4dcbc441db491029112d92393fc520e31568c0ddcd5dc54b4763d9aba8e2535f89dee4ffed
- SSDEEP 6144:XUJJuV1cdhIoA7vJ0CLoCgvDLe4AmFvirGcEOkCybEaQRuy8K:XYsVOdhElvkCgvDLe4usOkxHy
- TLSH T118C48D29B6D0C036C5B39574C4A186BAEAB17432372549CFA3D5475A0F337E2BA7930E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory