General
- Target 2026-08-06_7630cb1872f4cf1295c4c76f66fb5d29_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- Sample260806-vn9brawekc
- SHA256 481ec06cebc6b625d111a1aa924c78b2c908219136494ea43e3b689bc9ae6782
- MD5 7630cb1872f4cf1295c4c76f66fb5d29
- SHA1 de1104588b427a4fe93d135394a1eecdeca29137
- SHA512 8ecf01fda7b7ea6e60448e8ab156d93cd6e446dd99138f54e2496248713a084085a59ddcfdb5e7779a98982be8f987937fb22d7a2f4108573123b5b93368b9a9
- SSDEEP 6144:ecTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:eSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T18AD45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-06_7630cb1872f4cf1295c4c76f66fb5d29_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-06_7630cb1872f4cf1295c4c76f66fb5d29_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- SHA256 481ec06cebc6b625d111a1aa924c78b2c908219136494ea43e3b689bc9ae6782
- MD5 7630cb1872f4cf1295c4c76f66fb5d29
- SHA1 de1104588b427a4fe93d135394a1eecdeca29137
- SHA512 8ecf01fda7b7ea6e60448e8ab156d93cd6e446dd99138f54e2496248713a084085a59ddcfdb5e7779a98982be8f987937fb22d7a2f4108573123b5b93368b9a9
- SSDEEP 6144:ecTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:eSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T18AD45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory