General
- Target 2026-08-04_5dfce771b6bb682819e6f536605f7432_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- Sample260804-ys6m7sdm2y
- SHA256 45dd553770213b6d03d1e493ee23eefc01fabf284b65cfee8d187fd1ae7af222
- MD5 5dfce771b6bb682819e6f536605f7432
- SHA1 b0d4293cd47e3a83e96ced7a10b8efa93f564ba2
- SHA512 52282ad1bf357073c99cb8a802bde00cc8b79981f538d55d5a3f156475152fcf269f66599e904c8c1a94e1892ec462ee46c1146536ae8106da837d1736193f25
- SSDEEP 6144:dcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:dSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T128D45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-04_5dfce771b6bb682819e6f536605f7432_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_5dfce771b6bb682819e6f536605f7432_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- SHA256 45dd553770213b6d03d1e493ee23eefc01fabf284b65cfee8d187fd1ae7af222
- MD5 5dfce771b6bb682819e6f536605f7432
- SHA1 b0d4293cd47e3a83e96ced7a10b8efa93f564ba2
- SHA512 52282ad1bf357073c99cb8a802bde00cc8b79981f538d55d5a3f156475152fcf269f66599e904c8c1a94e1892ec462ee46c1146536ae8106da837d1736193f25
- SSDEEP 6144:dcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:dSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T128D45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory