General
- Target 2026-08-03_04df61074d6850226399eda85f5b6176_amadey_coinminer_elex_smoke-loader_stop
- Size 511KB
- Sample260804-qgfnmsfm51
- SHA256 4f1ccab6e75c26a1adcf570933c0467d0314faf3ce4c724095e58e7b8ee6ab35
- MD5 04df61074d6850226399eda85f5b6176
- SHA1 728397ea2f929cdb59eb9e33f2d77e178f7f16ad
- SHA512 ae13cd5bab8f8080df61aab9d431777a08b3901051635c4ed12dcefb0597b6b2d163fb3495b201218b7c8b983a45a9715ead00f03eec89ba6f4867c942a89704
- SSDEEP 6144:xcTgav1cdCTuoPbgwmOLJvKRILSFvdFDcEOkCybEaQRXr9HNdvOax5Rv0:xSvO2x9mONvKRILSFnOkx2LIax5F0
- TLSH T12EB45C26F6908036C4B34575C5F64BAAFAB4BC21631156CBA3943A6A1F737D2BD3130E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_04df61074d6850226399eda85f5b6176_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_04df61074d6850226399eda85f5b6176_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_04df61074d6850226399eda85f5b6176_amadey_coinminer_elex_smoke-loader_stop
- Size 511KB
- SHA256 4f1ccab6e75c26a1adcf570933c0467d0314faf3ce4c724095e58e7b8ee6ab35
- MD5 04df61074d6850226399eda85f5b6176
- SHA1 728397ea2f929cdb59eb9e33f2d77e178f7f16ad
- SHA512 ae13cd5bab8f8080df61aab9d431777a08b3901051635c4ed12dcefb0597b6b2d163fb3495b201218b7c8b983a45a9715ead00f03eec89ba6f4867c942a89704
- SSDEEP 6144:xcTgav1cdCTuoPbgwmOLJvKRILSFvdFDcEOkCybEaQRXr9HNdvOax5Rv0:xSvO2x9mONvKRILSFnOkx2LIax5F0
- TLSH T12EB45C26F6908036C4B34575C5F64BAAFAB4BC21631156CBA3943A6A1F737D2BD3130E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory