General
- Target 2026-08-07_ffb18ba67c0ba50ddf169ca1ec7aa050_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- Sample260807-2lhvcavdnb
- SHA256 6fe6fe1c78d58b5b34ad8a367792e07e89f19a7e8697e46d5326e7043ccc81b1
- MD5 ffb18ba67c0ba50ddf169ca1ec7aa050
- SHA1 a470023558af93a22bfb79dbfa465b92218782a7
- SHA512 18a2b82538be7bad97c1416d82a30a8f682c82d123c65cbd5073b84f0b09d880411c289bf9e5c50ae3b1e044d6d4944f4fd0c34c70ff4d5b5615d8304c26e960
- SSDEEP 6144:qcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:qSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T182D45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-07_ffb18ba67c0ba50ddf169ca1ec7aa050_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_ffb18ba67c0ba50ddf169ca1ec7aa050_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- SHA256 6fe6fe1c78d58b5b34ad8a367792e07e89f19a7e8697e46d5326e7043ccc81b1
- MD5 ffb18ba67c0ba50ddf169ca1ec7aa050
- SHA1 a470023558af93a22bfb79dbfa465b92218782a7
- SHA512 18a2b82538be7bad97c1416d82a30a8f682c82d123c65cbd5073b84f0b09d880411c289bf9e5c50ae3b1e044d6d4944f4fd0c34c70ff4d5b5615d8304c26e960
- SSDEEP 6144:qcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:qSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T182D45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory