General
- Target 2026-08-08_e4e52e5f4fe9eb5bef4910dd5115773e_amadey_coinminer_elex_smoke-loader_stop
- Size 766KB
- Sample260808-xcy3raw1h1
- SHA256 1852ea51def4e029672eb8224a8f2c973a67304e17d8b5bc854ab138d722a86b
- MD5 e4e52e5f4fe9eb5bef4910dd5115773e
- SHA1 520dcf49767153d53235bfacaba881d6e9cade15
- SHA512 da5b4da8a64d1f9652d8d015f890e3c9c6925c3f592029327ad89ab0edc6a5fa508b6e97df93818b9dd74491d465a573e00f7225dbff44a45964649deab77932
- SSDEEP 12288:PSvO2x9mONvKRhLSFtsOkx2LIaeyk5FAQjU/Liw:6vO2xJKRh2kOkx2LFxNcUV
- TLSH T1F7F45A31E241C03AD0A74576C6FA0BAFE564BD25531155CBA3C43A6A2FB36D2BE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-08_e4e52e5f4fe9eb5bef4910dd5115773e_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_e4e52e5f4fe9eb5bef4910dd5115773e_amadey_coinminer_elex_smoke-loader_stop
- Size 766KB
- SHA256 1852ea51def4e029672eb8224a8f2c973a67304e17d8b5bc854ab138d722a86b
- MD5 e4e52e5f4fe9eb5bef4910dd5115773e
- SHA1 520dcf49767153d53235bfacaba881d6e9cade15
- SHA512 da5b4da8a64d1f9652d8d015f890e3c9c6925c3f592029327ad89ab0edc6a5fa508b6e97df93818b9dd74491d465a573e00f7225dbff44a45964649deab77932
- SSDEEP 12288:PSvO2x9mONvKRhLSFtsOkx2LIaeyk5FAQjU/Liw:6vO2xJKRh2kOkx2LFxNcUV
- TLSH T1F7F45A31E241C03AD0A74576C6FA0BAFE564BD25531155CBA3C43A6A2FB36D2BE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory