General
- Target 2026-08-09_4f8fc5e2864e16e0487ed49d3390ee8e_amadey_coinminer_elex_smoke-loader_stop
- Size 766KB
- Sample260809-1ppavsej7w
- SHA256 2fde7209fa80749b0f5bed5868bd23bdc770a3d9bda7bba7b861f66d03032937
- MD5 4f8fc5e2864e16e0487ed49d3390ee8e
- SHA1 07ce95c7e70541f6fbe64a96e2f4cc2b75831f79
- SHA512 a374800a0fdf9170241063e673412977baad089308e63e9d81f03789a7059eb0f520f1fd42a937324f17a3d05c5286cc1ebdcebd908f4e3a3a6bc750e288b66b
- SSDEEP 12288:xSvO2x9mONvKRwLSFtsOkx2LIa+ya5FAQjU/Liw:YvO2xJKRw2kOkx2LFRvcUV
- TLSH T12DF45A31E241C03AD0A74576C6FA0BAFE564BD25531155CBA3C43A6A2FB36D2BE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-09_4f8fc5e2864e16e0487ed49d3390ee8e_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_4f8fc5e2864e16e0487ed49d3390ee8e_amadey_coinminer_elex_smoke-loader_stop
- Size 766KB
- SHA256 2fde7209fa80749b0f5bed5868bd23bdc770a3d9bda7bba7b861f66d03032937
- MD5 4f8fc5e2864e16e0487ed49d3390ee8e
- SHA1 07ce95c7e70541f6fbe64a96e2f4cc2b75831f79
- SHA512 a374800a0fdf9170241063e673412977baad089308e63e9d81f03789a7059eb0f520f1fd42a937324f17a3d05c5286cc1ebdcebd908f4e3a3a6bc750e288b66b
- SSDEEP 12288:xSvO2x9mONvKRwLSFtsOkx2LIa+ya5FAQjU/Liw:YvO2xJKRw2kOkx2LFRvcUV
- TLSH T12DF45A31E241C03AD0A74576C6FA0BAFE564BD25531155CBA3C43A6A2FB36D2BE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Custom signature
UPX dump on OEP (original entry point)
Executes dropped EXE
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
Drops file in System32 directory