General
- Target 2026-08-03_34a9fdcc469a39772b363d167c495c1e_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- Sample260804-ppmw9awybx
- SHA256 4b885b9e3667711d0977ed925970080cf6ae50934284a55f886a8c69abb39d2c
- MD5 34a9fdcc469a39772b363d167c495c1e
- SHA1 1ad333876d8945a92929e9d0b5ffb86d9430573b
- SHA512 779d36faafcf2919c6034a3e6d0afd8cecf6932f0f1b84ac60d35229dbe680caeea0ee7959c743e69ef7580eb9ca4383698242b9a96a40c69e05ca52d531764e
- SSDEEP 6144:kcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:kSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T1B1D45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-03_34a9fdcc469a39772b363d167c495c1e_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_34a9fdcc469a39772b363d167c495c1e_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- SHA256 4b885b9e3667711d0977ed925970080cf6ae50934284a55f886a8c69abb39d2c
- MD5 34a9fdcc469a39772b363d167c495c1e
- SHA1 1ad333876d8945a92929e9d0b5ffb86d9430573b
- SHA512 779d36faafcf2919c6034a3e6d0afd8cecf6932f0f1b84ac60d35229dbe680caeea0ee7959c743e69ef7580eb9ca4383698242b9a96a40c69e05ca52d531764e
- SSDEEP 6144:kcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:kSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T1B1D45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory