General
- Target 2026-08-08_9149ea68a354f9ca557b453815e47068_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- Sample260809-agwf4awhmf
- SHA256 1a9b93687e1103bc21c1881554c694c63f354933ed0d0e1503106a0c3c103e18
- MD5 9149ea68a354f9ca557b453815e47068
- SHA1 2f3cd95976ceeda42ad415b471214d458346589e
- SHA512 1ce5f3027e557c4999e13de5e478f2541b2a13e6a159f11818fcd5292c31107b5a596da0e30bf2cf82428f716caa2a625043b26aa56c2905c3eded05a0708668
- SSDEEP 6144:McTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:MSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T1A7D45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-08_9149ea68a354f9ca557b453815e47068_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_9149ea68a354f9ca557b453815e47068_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- SHA256 1a9b93687e1103bc21c1881554c694c63f354933ed0d0e1503106a0c3c103e18
- MD5 9149ea68a354f9ca557b453815e47068
- SHA1 2f3cd95976ceeda42ad415b471214d458346589e
- SHA512 1ce5f3027e557c4999e13de5e478f2541b2a13e6a159f11818fcd5292c31107b5a596da0e30bf2cf82428f716caa2a625043b26aa56c2905c3eded05a0708668
- SSDEEP 6144:McTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:MSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T1A7D45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory