General
- Target 2026-08-08_5a76fef262bd32dbbd7d0991cf3cad35_amadey_coinminer_elex_smoke-loader_stop
- Size 638KB
- Sample260808-xkt4rsxtcy
- SHA256 2c9928cd6aef432e63af79ee2dd72cae5c75b634913e57eb93c0bcded04d4baf
- MD5 5a76fef262bd32dbbd7d0991cf3cad35
- SHA1 80275f3827104653764bc664ec24f059383e0aef
- SHA512 9ed503d0a0b342804b33268201d844da436372b10366b93705348161acaee8851ee8a51946b8c8b15c005f79deb584e046c3e681a9671791cea3b8419bd05791
- SSDEEP 6144:AcTgav1cdCTuoPbgwmOLJvKRhLSFXdFwirGcEOkCybEaQRXr9HNdvOaey8KK5R2:ASvO2x9mONvKRhLSFtsOkx2LIaeyk5g
- TLSH T1FAD46B26B6908037C0B74675C5B64BAAFAB5BC21631186CFA380761A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-08_5a76fef262bd32dbbd7d0991cf3cad35_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_5a76fef262bd32dbbd7d0991cf3cad35_amadey_coinminer_elex_smoke-loader_stop
- Size 638KB
- SHA256 2c9928cd6aef432e63af79ee2dd72cae5c75b634913e57eb93c0bcded04d4baf
- MD5 5a76fef262bd32dbbd7d0991cf3cad35
- SHA1 80275f3827104653764bc664ec24f059383e0aef
- SHA512 9ed503d0a0b342804b33268201d844da436372b10366b93705348161acaee8851ee8a51946b8c8b15c005f79deb584e046c3e681a9671791cea3b8419bd05791
- SSDEEP 6144:AcTgav1cdCTuoPbgwmOLJvKRhLSFXdFwirGcEOkCybEaQRXr9HNdvOaey8KK5R2:ASvO2x9mONvKRhLSFtsOkx2LIaeyk5g
- TLSH T1FAD46B26B6908037C0B74675C5B64BAAFAB5BC21631186CFA380761A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory