General
- Target 2026-08-04_a1032a460f6fb9f755a30677ffd9f59f_amadey_coinminer_elex_smoke-loader_stop
- Size 761KB
- Sample260804-r3nrtazwaw
- SHA256 973f4208318cd407e20384c1c2f5477479d2f85bdc991219b66ff06670d172a2
- MD5 a1032a460f6fb9f755a30677ffd9f59f
- SHA1 4e92c44b9c35e6b819c2bf0e7ec4667dfa5a39db
- SHA512 c255ba7de796d228f404fdd4e32eb43693e2ae41b5c36296a1e001c19b9b2eb51c260e650f0c8cdfd7ce2c30448d98dcd97b4e22d7076960373c84013ffb12ea
- SSDEEP 12288:FSvO2x9mONvKRwLSFtsOkxHya5hYIW0p98B:kvO2xJKRw2kOkxSkW298B
- TLSH T1EEF49E35A2808036C0B34532C6F94AABF9797D35631565CBA3843B662F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-04_a1032a460f6fb9f755a30677ffd9f59f_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_a1032a460f6fb9f755a30677ffd9f59f_amadey_coinminer_elex_smoke-loader_stop
- Size 761KB
- SHA256 973f4208318cd407e20384c1c2f5477479d2f85bdc991219b66ff06670d172a2
- MD5 a1032a460f6fb9f755a30677ffd9f59f
- SHA1 4e92c44b9c35e6b819c2bf0e7ec4667dfa5a39db
- SHA512 c255ba7de796d228f404fdd4e32eb43693e2ae41b5c36296a1e001c19b9b2eb51c260e650f0c8cdfd7ce2c30448d98dcd97b4e22d7076960373c84013ffb12ea
- SSDEEP 12288:FSvO2x9mONvKRwLSFtsOkxHya5hYIW0p98B:kvO2xJKRw2kOkxSkW298B
- TLSH T1EEF49E35A2808036C0B34532C6F94AABF9797D35631565CBA3843B662F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory