General
- Target 2026-08-05_c428fb203f67852ff131e8fab6d2da1a_amadey_coinminer_elex_smoke-loader_stop
- Size 525KB
- Sample260805-hkl1ts1cmd
- SHA256 d6074b3586cd836a5f32df03a77711d5a31c2dc3117d98e9789b615144303d81
- MD5 c428fb203f67852ff131e8fab6d2da1a
- SHA1 cb16d730e5051693391402b8e6bb912a62a71e37
- SHA512 a5d7e8bed25f387301f63a71d74e75040d6a892f92e5e02a18858071404aefdd458b51273331852edf49024f84c4bd921ccebf8be225783587e393a20ef9638f
- SSDEEP 6144:gcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K:gSvO2x9mONvKRwLSFtsOkx2LIa+y
- TLSH T1D6B47D2AB6A0D076C4779579C4A257BAFBB1742137204ACFA390475A1F237E2BE3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-05_c428fb203f67852ff131e8fab6d2da1a_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_c428fb203f67852ff131e8fab6d2da1a_amadey_coinminer_elex_smoke-loader_stop
- Size 525KB
- SHA256 d6074b3586cd836a5f32df03a77711d5a31c2dc3117d98e9789b615144303d81
- MD5 c428fb203f67852ff131e8fab6d2da1a
- SHA1 cb16d730e5051693391402b8e6bb912a62a71e37
- SHA512 a5d7e8bed25f387301f63a71d74e75040d6a892f92e5e02a18858071404aefdd458b51273331852edf49024f84c4bd921ccebf8be225783587e393a20ef9638f
- SSDEEP 6144:gcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K:gSvO2x9mONvKRwLSFtsOkx2LIa+y
- TLSH T1D6B47D2AB6A0D076C4779579C4A257BAFBB1742137204ACFA390475A1F237E2BE3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory