General
- Target 2026-08-07_7d7b561e982be589841e38a737a9c265_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- Sample260807-xp9d9avvb1
- SHA256 7681d5d150b8af96094ffc4a01950f39e776efb6fbdbb35d8f4c55f8039c7f1e
- MD5 7d7b561e982be589841e38a737a9c265
- SHA1 f4cb3dc47f393001fbe77e7c8ad1058b4730cfcb
- SHA512 fe63dca578c5c5e43328f79fe99cfb4c87cbf652b4364c545f0dcfceb2f3b36275f1ed83226701dbd9330481d0f73f4911d784816ab980d537af026f5d80f5e5
- SSDEEP 6144:oWVrC1c2oonALgPLj7vf1LKlyIFVirGcEOkCybEaQRuy8K:okCO2zVPX7vf1LKlIsOkxHy
- TLSH T19EC47C29B690D076C4779574C4A187AAFAB1B432372449CFB3D00B5A1F237E2BA7530E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-07_7d7b561e982be589841e38a737a9c265_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-07_7d7b561e982be589841e38a737a9c265_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_7d7b561e982be589841e38a737a9c265_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- SHA256 7681d5d150b8af96094ffc4a01950f39e776efb6fbdbb35d8f4c55f8039c7f1e
- MD5 7d7b561e982be589841e38a737a9c265
- SHA1 f4cb3dc47f393001fbe77e7c8ad1058b4730cfcb
- SHA512 fe63dca578c5c5e43328f79fe99cfb4c87cbf652b4364c545f0dcfceb2f3b36275f1ed83226701dbd9330481d0f73f4911d784816ab980d537af026f5d80f5e5
- SSDEEP 6144:oWVrC1c2oonALgPLj7vf1LKlyIFVirGcEOkCybEaQRuy8K:okCO2zVPX7vf1LKlIsOkxHy
- TLSH T19EC47C29B690D076C4779574C4A187AAFAB1B432372449CFB3D00B5A1F237E2BA7530E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory