General
- Target 2026-08-06_a40f37af498f5afecc6b57ae3065e58c_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- Sample260806-vf11eabb23
- SHA256 8ffea8969eb275cbabf1439b8b90b75a1a3f9c08679105f995b823f52731906a
- MD5 a40f37af498f5afecc6b57ae3065e58c
- SHA1 3131b90493c460b0784b86e164a69739e5251abd
- SHA512 82d708f691276e65619ca9a2162937434d60d479b8750a6da1ea43c2f3107890d9c5bab254ef4a341c4ba4bfdf233bd001731a16a814d127f16185f35412b289
- SSDEEP 6144:WWVrC1c2oonALgPLj7vf1LKlyIFVirGcEOkCybEaQRuy8K:WkCO2zVPX7vf1LKlIsOkxHy
- TLSH T139C47C29B690D076C4779574C4A197AAFAB1B432372449CFB3D00B5A1F237E2BA7530E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-06_a40f37af498f5afecc6b57ae3065e58c_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-06_a40f37af498f5afecc6b57ae3065e58c_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- SHA256 8ffea8969eb275cbabf1439b8b90b75a1a3f9c08679105f995b823f52731906a
- MD5 a40f37af498f5afecc6b57ae3065e58c
- SHA1 3131b90493c460b0784b86e164a69739e5251abd
- SHA512 82d708f691276e65619ca9a2162937434d60d479b8750a6da1ea43c2f3107890d9c5bab254ef4a341c4ba4bfdf233bd001731a16a814d127f16185f35412b289
- SSDEEP 6144:WWVrC1c2oonALgPLj7vf1LKlyIFVirGcEOkCybEaQRuy8K:WkCO2zVPX7vf1LKlIsOkxHy
- TLSH T139C47C29B690D076C4779574C4A197AAFAB1B432372449CFB3D00B5A1F237E2BA7530E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory