General
- Target 2026-08-04_b6a1354249b30c94329fc8b170cd131b_amadey_coinminer_elex_smoke-loader_stop
- Size 766KB
- Sample260804-w9mkjsvxcv
- SHA256 4ce694431cf4ac1f26f2d6d7a64f01e1923311c1e6668c214ea65b67bd3c4411
- MD5 b6a1354249b30c94329fc8b170cd131b
- SHA1 18a5ec8b2b7afaa6667d7517b55840de3523107d
- SHA512 c33e47a401ad6c76b8db10e107cfaff4559a65771d21248e5f99b80cfe16c0e221c5cad45dda970f35cbf939be23b1b794a81150857aa3fa22a1d95d693d345d
- SSDEEP 12288:XSvO2x9mONvKRwLSFtsOkx2LIa+ya5FAQjU/Liw:ivO2xJKRw2kOkx2LFRvcUV
- TLSH T1D8F45A31E241C03AD0A74576C6FA0BAFE564BD25531155CBA3C43A6A2FB36D2BE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-04_b6a1354249b30c94329fc8b170cd131b_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_b6a1354249b30c94329fc8b170cd131b_amadey_coinminer_elex_smoke-loader_stop
- Size 766KB
- SHA256 4ce694431cf4ac1f26f2d6d7a64f01e1923311c1e6668c214ea65b67bd3c4411
- MD5 b6a1354249b30c94329fc8b170cd131b
- SHA1 18a5ec8b2b7afaa6667d7517b55840de3523107d
- SHA512 c33e47a401ad6c76b8db10e107cfaff4559a65771d21248e5f99b80cfe16c0e221c5cad45dda970f35cbf939be23b1b794a81150857aa3fa22a1d95d693d345d
- SSDEEP 12288:XSvO2x9mONvKRwLSFtsOkx2LIa+ya5FAQjU/Liw:ivO2xJKRw2kOkx2LFRvcUV
- TLSH T1D8F45A31E241C03AD0A74576C6FA0BAFE564BD25531155CBA3C43A6A2FB36D2BE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Custom signature
UPX dump on OEP (original entry point)
Executes dropped EXE
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
Drops file in System32 directory