General
- Target 2026-08-03_259f01bb588938211f320c676a70afc0_amadey_coinminer_elex_smoke-loader_stop
- Size 576KB
- Sample260804-pyyp4s1bqf
- SHA256 8a2430e3d7ba6dee5ea603e91d153d98d4d861d2ec228deddc59f746853b925e
- MD5 259f01bb588938211f320c676a70afc0
- SHA1 a2feb2198599154f456e9093367cf94bfd1b919e
- SHA512 8d77175bbb658945db8ab41aba5c45913f87c702ce553b88a38572fe4331cf4e86bba19ab2718751b82dedf69bdf906308b8d607d52bdb0f366ca9d7cbbe5ca9
- SSDEEP 6144:McTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K/:MSvO2x9mONvKRwLSFtsOkx2LIa+yx
- TLSH T1E8C46D26B6908072C4779578C4A257AAFBB1BC2127204ACFA390775A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-03_259f01bb588938211f320c676a70afc0_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_259f01bb588938211f320c676a70afc0_amadey_coinminer_elex_smoke-loader_stop
- Size 576KB
- SHA256 8a2430e3d7ba6dee5ea603e91d153d98d4d861d2ec228deddc59f746853b925e
- MD5 259f01bb588938211f320c676a70afc0
- SHA1 a2feb2198599154f456e9093367cf94bfd1b919e
- SHA512 8d77175bbb658945db8ab41aba5c45913f87c702ce553b88a38572fe4331cf4e86bba19ab2718751b82dedf69bdf906308b8d607d52bdb0f366ca9d7cbbe5ca9
- SSDEEP 6144:McTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K/:MSvO2x9mONvKRwLSFtsOkx2LIa+yx
- TLSH T1E8C46D26B6908072C4779578C4A257AAFBB1BC2127204ACFA390775A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory