General
- Target 2026-08-08_b4a5ddca2e4d0171d861be72ce21f4cc_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- Sample260808-mtnm8syybv
- SHA256 a0d48c10e41ab5620e4af9f7a5cca3630852402c92c84d7a426c58d88915208c
- MD5 b4a5ddca2e4d0171d861be72ce21f4cc
- SHA1 36c227437c0c38ff1b3fa290b44dc3f8359af9db
- SHA512 fdf1241c40b044646d30d48a000876c6c48b09e94c57c93d145a2fdd19ea29c56a7672d4248eaf2a56d139405a6c4e494d8c666c68c64017cb9daca2c0d840cc
- SSDEEP 6144:+4ZaN1cb90oOTFmIFLq0cvnXhLCqj2EFNirGcEOkCybEaQRuy8K:+rNOb9+sIF+0cvnXhLCqEsOkxHy
- TLSH T158C48D29B6E0C076C4B79578C4A186B6FAB17832372459CFA394075A1F337E2BA3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-08_b4a5ddca2e4d0171d861be72ce21f4cc_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_b4a5ddca2e4d0171d861be72ce21f4cc_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- SHA256 a0d48c10e41ab5620e4af9f7a5cca3630852402c92c84d7a426c58d88915208c
- MD5 b4a5ddca2e4d0171d861be72ce21f4cc
- SHA1 36c227437c0c38ff1b3fa290b44dc3f8359af9db
- SHA512 fdf1241c40b044646d30d48a000876c6c48b09e94c57c93d145a2fdd19ea29c56a7672d4248eaf2a56d139405a6c4e494d8c666c68c64017cb9daca2c0d840cc
- SSDEEP 6144:+4ZaN1cb90oOTFmIFLq0cvnXhLCqj2EFNirGcEOkCybEaQRuy8K:+rNOb9+sIF+0cvnXhLCqEsOkxHy
- TLSH T158C48D29B6E0C076C4B79578C4A186B6FAB17832372459CFA394075A1F337E2BA3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory