General
- Target 2026-08-05_c06be5536a1263656124b305404d1e9f_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- Sample260805-hkvb7sfb72
- SHA256 3c5cc25895cf6200def5328cfd37b207c77385bf8dead4cc90567ef50dc0239c
- MD5 c06be5536a1263656124b305404d1e9f
- SHA1 b8d7f730ce8633b981dc237aa40dd8d0b2a20df2
- SHA512 05ff62612ff4c56333ccd7f2d8cf57bb88fc5cac690effcd70ab94ed4888d84ddbddd80d4671e0ba0dbacec4ec83175d3782edc0716d74422660e3341f23bb18
- SSDEEP 6144:mcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:mSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T1F9D45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-05_c06be5536a1263656124b305404d1e9f_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_c06be5536a1263656124b305404d1e9f_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- SHA256 3c5cc25895cf6200def5328cfd37b207c77385bf8dead4cc90567ef50dc0239c
- MD5 c06be5536a1263656124b305404d1e9f
- SHA1 b8d7f730ce8633b981dc237aa40dd8d0b2a20df2
- SHA512 05ff62612ff4c56333ccd7f2d8cf57bb88fc5cac690effcd70ab94ed4888d84ddbddd80d4671e0ba0dbacec4ec83175d3782edc0716d74422660e3341f23bb18
- SSDEEP 6144:mcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:mSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T1F9D45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory