General
- Target 2026-08-09_ef80a4d8d595cb6f702435c7a0f7cab8_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- Sample260809-bp71jafq31
- SHA256 3b090a41f27c12eb73deb828621f1298b298a1c04386dedb1fca3cdb2cb97e1d
- MD5 ef80a4d8d595cb6f702435c7a0f7cab8
- SHA1 ddd0a74f7002c767208c4b2c828499fec4835b84
- SHA512 f9929277ff25b4870cd40bbf766be2857d0d29ff0ea1043fa311cd319fe0163b8613d5fb4558fa103adffdd2356371ae68708d696dafb86403c1ce606920e263
- SSDEEP 6144:d6UE71cqQEoMr5C2iKLJChYSvL+8xPFxirGcEOkCybEaQRXr9HNdvOa+y8K:dO7OqQs42iKFChYSvL+8AsOkx2LIa+y
- TLSH T1C5C46C26B6A0D076C4B79574C4A28BA6FFB1742227244BCFA39047561F637E2BE3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-09_ef80a4d8d595cb6f702435c7a0f7cab8_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_ef80a4d8d595cb6f702435c7a0f7cab8_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- SHA256 3b090a41f27c12eb73deb828621f1298b298a1c04386dedb1fca3cdb2cb97e1d
- MD5 ef80a4d8d595cb6f702435c7a0f7cab8
- SHA1 ddd0a74f7002c767208c4b2c828499fec4835b84
- SHA512 f9929277ff25b4870cd40bbf766be2857d0d29ff0ea1043fa311cd319fe0163b8613d5fb4558fa103adffdd2356371ae68708d696dafb86403c1ce606920e263
- SSDEEP 6144:d6UE71cqQEoMr5C2iKLJChYSvL+8xPFxirGcEOkCybEaQRXr9HNdvOa+y8K:dO7OqQs42iKFChYSvL+8AsOkx2LIa+y
- TLSH T1C5C46C26B6A0D076C4B79574C4A28BA6FFB1742227244BCFA39047561F637E2BE3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory