General
- Target 2026-08-09_2b9d3821f70add45f58cbb8ebbe837f1_amadey_coinminer_elex_smoke-loader_stop
- Size 576KB
- Sample260809-a4l6ya1wcv
- SHA256 a1018477368dc76f78ea8a463504732dc1f58682df00916fc84d115b6464d15d
- MD5 2b9d3821f70add45f58cbb8ebbe837f1
- SHA1 f45fad65513cdb01cd6c64107e1b7cc50976b7e8
- SHA512 2b6c4b0c97c1506e0418303c3b8900b09149a6e4f3ea366be5c7b8a89ae3e8711b5766c529136631e23e53875fe3cfbd964d581a961177512b82f91b2339b859
- SSDEEP 6144:WcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K/:WSvO2x9mONvKRwLSFtsOkx2LIa+yx
- TLSH T131C46D26B6908072C4779578C4A257AAFBB1BC2127204ACFA390775A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-09_2b9d3821f70add45f58cbb8ebbe837f1_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_2b9d3821f70add45f58cbb8ebbe837f1_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win11ltsc2024-20260710-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_2b9d3821f70add45f58cbb8ebbe837f1_amadey_coinminer_elex_smoke-loader_stop
- Size 576KB
- SHA256 a1018477368dc76f78ea8a463504732dc1f58682df00916fc84d115b6464d15d
- MD5 2b9d3821f70add45f58cbb8ebbe837f1
- SHA1 f45fad65513cdb01cd6c64107e1b7cc50976b7e8
- SHA512 2b6c4b0c97c1506e0418303c3b8900b09149a6e4f3ea366be5c7b8a89ae3e8711b5766c529136631e23e53875fe3cfbd964d581a961177512b82f91b2339b859
- SSDEEP 6144:WcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K/:WSvO2x9mONvKRwLSFtsOkx2LIa+yx
- TLSH T131C46D26B6908072C4779578C4A257AAFBB1BC2127204ACFA390775A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory