General
- Target 2026-08-06_a558fbe082212f53f527080d38acf65c_amadey_coinminer_elex_smoke-loader_stop
- Size 576KB
- Sample260806-hdvz6avfrd
- SHA256 524a5a28bb08c00c73f3757a27ab0cc0453d203f86ea593fee1514d4d8b1f0cb
- MD5 a558fbe082212f53f527080d38acf65c
- SHA1 03e22446f98b9dcdf84388c0db8bcff743877be7
- SHA512 7f63280496332a476f67a5e6d041f7b5b76ff33bfe1c2c3a7a35f77cc0dc87f64a6e862b83206ebb7ff5c0686d89ac739136d3a22d9f0068e98db48884a79a2a
- SSDEEP 6144:ncTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K/:nSvO2x9mONvKRwLSFtsOkx2LIa+yx
- TLSH T191C46D26B6908072C4779578C4A257AAFBB1BC2127204ACFA390775A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-06_a558fbe082212f53f527080d38acf65c_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-06_a558fbe082212f53f527080d38acf65c_amadey_coinminer_elex_smoke-loader_stop
- Size 576KB
- SHA256 524a5a28bb08c00c73f3757a27ab0cc0453d203f86ea593fee1514d4d8b1f0cb
- MD5 a558fbe082212f53f527080d38acf65c
- SHA1 03e22446f98b9dcdf84388c0db8bcff743877be7
- SHA512 7f63280496332a476f67a5e6d041f7b5b76ff33bfe1c2c3a7a35f77cc0dc87f64a6e862b83206ebb7ff5c0686d89ac739136d3a22d9f0068e98db48884a79a2a
- SSDEEP 6144:ncTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K/:nSvO2x9mONvKRwLSFtsOkx2LIa+yx
- TLSH T191C46D26B6908072C4779578C4A257AAFBB1BC2127204ACFA390775A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory