General
- Target 2026-08-03_63e83be80c2033175eaa1f940de07804_amadey_coinminer_elex_smoke-loader_stop
- Size 511KB
- Sample260804-nrm5csyfqf
- SHA256 0e8e374f32d242f8f13b36d7e6db3c374a8445c58cb07de4bc0cfb82c8e863c7
- MD5 63e83be80c2033175eaa1f940de07804
- SHA1 5caa812b90f817f832b60457c1561c3af0e9146e
- SHA512 b2f0d6ca224d83956ee430e7dd2efc66d382b52ae7757f3fb2b29652100340523b8831ed1e37e5df89d95bb3b4a54cef5f8e492f7b19a6572d7d60d31aa35918
- SSDEEP 6144:OcTgav1cdCTuoPbgwmOLJvKRILSFvdFDcEOkCybEaQRXr9HNdvOax5Rv0:OSvO2x9mONvKRILSFnOkx2LIax5F0
- TLSH T14AB45C26F6908036C4B34575C5F64BAAFAB4BC21631156CBA3943A6A1F737D2BD3130E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_63e83be80c2033175eaa1f940de07804_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_63e83be80c2033175eaa1f940de07804_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_63e83be80c2033175eaa1f940de07804_amadey_coinminer_elex_smoke-loader_stop
- Size 511KB
- SHA256 0e8e374f32d242f8f13b36d7e6db3c374a8445c58cb07de4bc0cfb82c8e863c7
- MD5 63e83be80c2033175eaa1f940de07804
- SHA1 5caa812b90f817f832b60457c1561c3af0e9146e
- SHA512 b2f0d6ca224d83956ee430e7dd2efc66d382b52ae7757f3fb2b29652100340523b8831ed1e37e5df89d95bb3b4a54cef5f8e492f7b19a6572d7d60d31aa35918
- SSDEEP 6144:OcTgav1cdCTuoPbgwmOLJvKRILSFvdFDcEOkCybEaQRXr9HNdvOax5Rv0:OSvO2x9mONvKRILSFnOkx2LIax5F0
- TLSH T14AB45C26F6908036C4B34575C5F64BAAFAB4BC21631156CBA3943A6A1F737D2BD3130E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory