General
- Target 2026-08-03_605c984509ed680cc4b8486a7a877006_amadey_coinminer_elex_smoke-loader_stop
- Size 766KB
- Sample260804-ntvl8adp5w
- SHA256 55c98e0a505f0cc22db801c3db4c698e78d6e0e752cba10646e65e8f9ae47821
- MD5 605c984509ed680cc4b8486a7a877006
- SHA1 3c273582839d57b23b8814b020d2cbdc45b15315
- SHA512 1e4612fe7070d6d6a4413a835e9812b723a847e8510c1617a7be9243b26784dcd91b4feb795853df26f5cf56f18e0ec0ee5086c419f3ae8eec17ec88b90d28aa
- SSDEEP 12288:fSvO2x9mONvKRwLSFtsOkx2LIa+ya5FAQjU/Liw:qvO2xJKRw2kOkx2LFRvcUV
- TLSH T161F45A31E241C03AD0A74576C6FA0BAFE564BD25531155CBA3C43A6A2FB36D2BE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-03_605c984509ed680cc4b8486a7a877006_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_605c984509ed680cc4b8486a7a877006_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win11ltsc2024-20260710-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_605c984509ed680cc4b8486a7a877006_amadey_coinminer_elex_smoke-loader_stop
- Size 766KB
- SHA256 55c98e0a505f0cc22db801c3db4c698e78d6e0e752cba10646e65e8f9ae47821
- MD5 605c984509ed680cc4b8486a7a877006
- SHA1 3c273582839d57b23b8814b020d2cbdc45b15315
- SHA512 1e4612fe7070d6d6a4413a835e9812b723a847e8510c1617a7be9243b26784dcd91b4feb795853df26f5cf56f18e0ec0ee5086c419f3ae8eec17ec88b90d28aa
- SSDEEP 12288:fSvO2x9mONvKRwLSFtsOkx2LIa+ya5FAQjU/Liw:qvO2xJKRw2kOkx2LFRvcUV
- TLSH T161F45A31E241C03AD0A74576C6FA0BAFE564BD25531155CBA3C43A6A2FB36D2BE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory