General
- Target 2026-08-09_5d19abbf24c9c629272ba486fd3616e9_amadey_coinminer_elex_smoke-loader_stop
- Size 576KB
- Sample260809-a3v3fsfn4s
- SHA256 18a67bc17c44b0027da19f98c938a84f93a0783a83620a8e87e542e579c78786
- MD5 5d19abbf24c9c629272ba486fd3616e9
- SHA1 b949266665c7af70fcd9ebca0671498f37741782
- SHA512 ef4dd3619873d8e4c3e48225244f6576ae2093443ad7299ac0ea036837946aa836bfd829bcf7155030e0fae2b5021f30d1a7b91870ac825245ddb0809b8eb672
- SSDEEP 6144:IcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K/:ISvO2x9mONvKRwLSFtsOkx2LIa+yx
- TLSH T157C46D26B6908072C4779578C4A257AAFBB1BC2127204ACFA390775A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-09_5d19abbf24c9c629272ba486fd3616e9_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_5d19abbf24c9c629272ba486fd3616e9_amadey_coinminer_elex_smoke-loader_stop
- Size 576KB
- SHA256 18a67bc17c44b0027da19f98c938a84f93a0783a83620a8e87e542e579c78786
- MD5 5d19abbf24c9c629272ba486fd3616e9
- SHA1 b949266665c7af70fcd9ebca0671498f37741782
- SHA512 ef4dd3619873d8e4c3e48225244f6576ae2093443ad7299ac0ea036837946aa836bfd829bcf7155030e0fae2b5021f30d1a7b91870ac825245ddb0809b8eb672
- SSDEEP 6144:IcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K/:ISvO2x9mONvKRwLSFtsOkx2LIa+yx
- TLSH T157C46D26B6908072C4779578C4A257AAFBB1BC2127204ACFA390775A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory