General
- Target 2026-08-08_1aaa013add6bdc42c520e47f49d375e9_amadey_coinminer_elex_smoke-loader_stop
- Size 374KB
- Sample260808-xp767atalh
- SHA256 24ccdfefb55616d1a3861478b56e0e266712aa6df84e8b91929b28a61c1c4a17
- MD5 1aaa013add6bdc42c520e47f49d375e9
- SHA1 c60b53a2e8ec2bb3be8f82bd89d1bb3ae9b42bd4
- SHA512 0562c2bcc6e44caf206c2f9cc1e79696724b8708638de7f2cd17a0e8734407795adecf074549bf55097848e1cc902b8e0da7ba21b2d33e8f485877b6733ea62b
- SSDEEP 6144:7cTgav1cdCTuoPbgwmOLJvKRILSFvdFDcEOkCybEaQRXr9HNdvOa:7SvO2x9mONvKRILSFnOkx2LIa
- TLSH T16F846D2AF6A0D076C4779579C4A247AAFBB1742137208ACFA390475A1F637E2BD3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_1aaa013add6bdc42c520e47f49d375e9_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_1aaa013add6bdc42c520e47f49d375e9_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_1aaa013add6bdc42c520e47f49d375e9_amadey_coinminer_elex_smoke-loader_stop
- Size 374KB
- SHA256 24ccdfefb55616d1a3861478b56e0e266712aa6df84e8b91929b28a61c1c4a17
- MD5 1aaa013add6bdc42c520e47f49d375e9
- SHA1 c60b53a2e8ec2bb3be8f82bd89d1bb3ae9b42bd4
- SHA512 0562c2bcc6e44caf206c2f9cc1e79696724b8708638de7f2cd17a0e8734407795adecf074549bf55097848e1cc902b8e0da7ba21b2d33e8f485877b6733ea62b
- SSDEEP 6144:7cTgav1cdCTuoPbgwmOLJvKRILSFvdFDcEOkCybEaQRXr9HNdvOa:7SvO2x9mONvKRILSFnOkx2LIa
- TLSH T16F846D2AF6A0D076C4779579C4A247AAFBB1742137208ACFA390475A1F637E2BD3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory