General
- Target 2026-08-06_7d6bd276fb33b0eabbfd0809a2be4b33_amadey_coinminer_elex_smoke-loader_stop
- Size 395KB
- Sample260806-spfpqayses
- SHA256 d7ed107867818e15e2a50ab8ff4994a0c5174f76d0d3cbf7a689a694af412025
- MD5 7d6bd276fb33b0eabbfd0809a2be4b33
- SHA1 3c5dfaa580bec7dbfb1345ff8a80b22355d5abec
- SHA512 443675998d23ec858f57dd503e076854667c2d79fb9269f73b1fe01052717e1f63b6e7224b383d0d607a8d85e4b6be81cd8acd3e55830bcd9b6cce27d247e491
- SSDEEP 6144:bcbcTgav1cdCTuoPbgwmOLJvKRILSFvdFDcEOkCybEaQRXr9HNdvOa:bCSvO2x9mONvKRILSFnOkx2LIa
- TLSH T15D846D2AB6A0D076C4B79579C4A247BAFBB1742137204ACFA390475A1F637E2BD3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-06_7d6bd276fb33b0eabbfd0809a2be4b33_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-06_7d6bd276fb33b0eabbfd0809a2be4b33_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-06_7d6bd276fb33b0eabbfd0809a2be4b33_amadey_coinminer_elex_smoke-loader_stop
- Size 395KB
- SHA256 d7ed107867818e15e2a50ab8ff4994a0c5174f76d0d3cbf7a689a694af412025
- MD5 7d6bd276fb33b0eabbfd0809a2be4b33
- SHA1 3c5dfaa580bec7dbfb1345ff8a80b22355d5abec
- SHA512 443675998d23ec858f57dd503e076854667c2d79fb9269f73b1fe01052717e1f63b6e7224b383d0d607a8d85e4b6be81cd8acd3e55830bcd9b6cce27d247e491
- SSDEEP 6144:bcbcTgav1cdCTuoPbgwmOLJvKRILSFvdFDcEOkCybEaQRXr9HNdvOa:bCSvO2x9mONvKRILSFnOkx2LIa
- TLSH T15D846D2AB6A0D076C4B79579C4A247BAFBB1742137204ACFA390475A1F637E2BD3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory