General
- Target 2026-08-09_97bb82855c16140bb747a266a3f11b44_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- Sample260809-hdsj2aar3s
- SHA256 6619b4b4e8c305f42b2e14bf6b5b00165faf1aa61198c50404479b075fdaccd0
- MD5 97bb82855c16140bb747a266a3f11b44
- SHA1 a0ab4225caa1283a2bd1cfa7217814f9258682a0
- SHA512 cb4e0507a470962aaddab566af01d46ce7a90e38bd77c602f48d8a0f9b99c2c4cb5a5421115caeb70214c93b6c8f61cecc81b757c52824ce9093b5334f59b102
- SSDEEP 6144:NWVrC1c2oonALgPLj7vf1LKlyIFVirGcEOkCybEaQRuy8K:NkCO2zVPX7vf1LKlIsOkxHy
- TLSH T16EC47C29B690D076C4779574C4A187AAFAB1B432372449CFB3D00B5A1F237E2BA7530E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-09_97bb82855c16140bb747a266a3f11b44_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_97bb82855c16140bb747a266a3f11b44_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- SHA256 6619b4b4e8c305f42b2e14bf6b5b00165faf1aa61198c50404479b075fdaccd0
- MD5 97bb82855c16140bb747a266a3f11b44
- SHA1 a0ab4225caa1283a2bd1cfa7217814f9258682a0
- SHA512 cb4e0507a470962aaddab566af01d46ce7a90e38bd77c602f48d8a0f9b99c2c4cb5a5421115caeb70214c93b6c8f61cecc81b757c52824ce9093b5334f59b102
- SSDEEP 6144:NWVrC1c2oonALgPLj7vf1LKlyIFVirGcEOkCybEaQRuy8K:NkCO2zVPX7vf1LKlIsOkxHy
- TLSH T16EC47C29B690D076C4779574C4A187AAFAB1B432372449CFB3D00B5A1F237E2BA7530E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory