General
- Target 2026-08-07_3561057d21c7e3000570686f70bc6c85_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- Sample260807-3ec6ysae26
- SHA256 a77b65efd8d4d662a8caeabab8a27b1aa276fa14565718020d1d139a5518ba56
- MD5 3561057d21c7e3000570686f70bc6c85
- SHA1 8528f03556bc8d1f1c7cd1a53f376fe65a80c071
- SHA512 0cf07ae0586d858fa591f73109178a561e453a8ddc12e6a4591418659f23daf2e831c4b4a00f2526f4b008959f81bd3ca50e53c0df6892e2f51133dae11efb08
- SSDEEP 6144:tcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:tSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T107D45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-07_3561057d21c7e3000570686f70bc6c85_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_3561057d21c7e3000570686f70bc6c85_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- SHA256 a77b65efd8d4d662a8caeabab8a27b1aa276fa14565718020d1d139a5518ba56
- MD5 3561057d21c7e3000570686f70bc6c85
- SHA1 8528f03556bc8d1f1c7cd1a53f376fe65a80c071
- SHA512 0cf07ae0586d858fa591f73109178a561e453a8ddc12e6a4591418659f23daf2e831c4b4a00f2526f4b008959f81bd3ca50e53c0df6892e2f51133dae11efb08
- SSDEEP 6144:tcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:tSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T107D45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory