General
- Target 2026-08-06_a1d2ad0f02900184420037b556494d96_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- Sample260806-jle5caweld
- SHA256 3431f808a54ff8fa3c59541ebaf1707360fe0dc6b6ef38e9583273b51f4668ca
- MD5 a1d2ad0f02900184420037b556494d96
- SHA1 8363d8a252263b6b2fbcf59efaf81052b85e04d7
- SHA512 3d70d822149d9deb48656996bf32ec2758372ef6118ac7ba7230bcd6f438b52c4f04858a13d7e3b4a3e72ad7bf745883e10bde62e41f0c5f7dde380aaa80e836
- SSDEEP 6144:FcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:FSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T16BD45B35A6808036C0B74631C6F64BAAF9B5BC21631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-06_a1d2ad0f02900184420037b556494d96_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-06_a1d2ad0f02900184420037b556494d96_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- SHA256 3431f808a54ff8fa3c59541ebaf1707360fe0dc6b6ef38e9583273b51f4668ca
- MD5 a1d2ad0f02900184420037b556494d96
- SHA1 8363d8a252263b6b2fbcf59efaf81052b85e04d7
- SHA512 3d70d822149d9deb48656996bf32ec2758372ef6118ac7ba7230bcd6f438b52c4f04858a13d7e3b4a3e72ad7bf745883e10bde62e41f0c5f7dde380aaa80e836
- SSDEEP 6144:FcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:FSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T16BD45B35A6808036C0B74631C6F64BAAF9B5BC21631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory