General
- Target 2026-08-06_30f3a83928921f3285ebcd67b9757467_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- Sample260807-bah3vsxzet
- SHA256 6e7bf15dadc04a91b076b56a3394ea19613aa44cadb2b05c0f6212fd1f342def
- MD5 30f3a83928921f3285ebcd67b9757467
- SHA1 c97927c89183e2a6e5da59eb4c0690a0580f2506
- SHA512 7c5cd916a287f9923b04289042e8e8688909b5d55f6715458ac4c4e8b6ac56f6501ac1cd1b9877bef20addea25939a6ee4adc9610eccd1472e219c348f356d13
- SSDEEP 6144:lUJJuV1cdhIoA7vJ0CLoCgvDLe4AmFvirGcEOkCybEaQRuy8K:lYsVOdhElvkCgvDLe4usOkxHy
- TLSH T153C48D29B6D0C036C5B39574C4A186BAEAB17432372549CFA3D5475A0F337E2BA7930E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-06_30f3a83928921f3285ebcd67b9757467_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-06_30f3a83928921f3285ebcd67b9757467_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- SHA256 6e7bf15dadc04a91b076b56a3394ea19613aa44cadb2b05c0f6212fd1f342def
- MD5 30f3a83928921f3285ebcd67b9757467
- SHA1 c97927c89183e2a6e5da59eb4c0690a0580f2506
- SHA512 7c5cd916a287f9923b04289042e8e8688909b5d55f6715458ac4c4e8b6ac56f6501ac1cd1b9877bef20addea25939a6ee4adc9610eccd1472e219c348f356d13
- SSDEEP 6144:lUJJuV1cdhIoA7vJ0CLoCgvDLe4AmFvirGcEOkCybEaQRuy8K:lYsVOdhElvkCgvDLe4usOkxHy
- TLSH T153C48D29B6D0C036C5B39574C4A186BAEAB17432372549CFA3D5475A0F337E2BA7930E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory