General
- Target 2026-08-04_329a9d0c81ef59322925969ce2821f0c_amadey_coinminer_elex_smoke-loader_stop
- Size 576KB
- Sample260804-tp4l8avarg
- SHA256 2b72130cfda20ac2e5f2ea5b0a60ba3ecd21db8e7b4bef6eb8e5dc57ea312d1b
- MD5 329a9d0c81ef59322925969ce2821f0c
- SHA1 6a85aa94bc8be7081a6bf9323cdc4280c9315d1a
- SHA512 71fa84b866accbec19a7b952608a518997d2af25ced482d416564482671e938ed4c6f1b2ee53d3d501561ca0d17fc1f331bf741b266fe3a0781367e4ea199580
- SSDEEP 6144:YcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K/:YSvO2x9mONvKRwLSFtsOkx2LIa+yx
- TLSH T1F5C46D26B6908072C4779578C4A257AAFBB1BC2127204ACFA390775A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-04_329a9d0c81ef59322925969ce2821f0c_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_329a9d0c81ef59322925969ce2821f0c_amadey_coinminer_elex_smoke-loader_stop
- Size 576KB
- SHA256 2b72130cfda20ac2e5f2ea5b0a60ba3ecd21db8e7b4bef6eb8e5dc57ea312d1b
- MD5 329a9d0c81ef59322925969ce2821f0c
- SHA1 6a85aa94bc8be7081a6bf9323cdc4280c9315d1a
- SHA512 71fa84b866accbec19a7b952608a518997d2af25ced482d416564482671e938ed4c6f1b2ee53d3d501561ca0d17fc1f331bf741b266fe3a0781367e4ea199580
- SSDEEP 6144:YcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K/:YSvO2x9mONvKRwLSFtsOkx2LIa+yx
- TLSH T1F5C46D26B6908072C4779578C4A257AAFBB1BC2127204ACFA390775A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory