General
- Target 2026-08-04_92940fee42a9d70586eef149b9313e64_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- Sample260804-xx3axaff47
- SHA256 4b24a2a3f7a70606b251d3790e8a153588160d716ab90efe915454782facad27
- MD5 92940fee42a9d70586eef149b9313e64
- SHA1 c0ece59f6aa9530ed14ca238e663f9859330b3d4
- SHA512 0a66c78442e19f68307c08bbe25f422fe657d64ff665ece21ccd0b88cdaa78d027327244a2af25e64c4cdf199dc4c75728e92f6b87b7ee2e69644f1570ba1c13
- SSDEEP 6144:74ZaN1cb90oOTFmIFLq0cvnXhLCqj2EFNirGcEOkCybEaQRuy8K:7rNOb9+sIF+0cvnXhLCqEsOkxHy
- TLSH T1F0C48D29B6E0C076C4B79578C4A186B6FAB17832372459CFA394075A1F337E2BA3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-04_92940fee42a9d70586eef149b9313e64_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_92940fee42a9d70586eef149b9313e64_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- SHA256 4b24a2a3f7a70606b251d3790e8a153588160d716ab90efe915454782facad27
- MD5 92940fee42a9d70586eef149b9313e64
- SHA1 c0ece59f6aa9530ed14ca238e663f9859330b3d4
- SHA512 0a66c78442e19f68307c08bbe25f422fe657d64ff665ece21ccd0b88cdaa78d027327244a2af25e64c4cdf199dc4c75728e92f6b87b7ee2e69644f1570ba1c13
- SSDEEP 6144:74ZaN1cb90oOTFmIFLq0cvnXhLCqj2EFNirGcEOkCybEaQRuy8K:7rNOb9+sIF+0cvnXhLCqEsOkxHy
- TLSH T1F0C48D29B6E0C076C4B79578C4A186B6FAB17832372459CFA394075A1F337E2BA3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory