General
- Target 2026-08-09_f9537bf6d88de733ec6127a823138c0d_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- Sample260809-jht44awzgv
- SHA256 0177bac0312b02a6c5cb0b36858ea915401e4c0cf112bff2fecd2a3c65765050
- MD5 f9537bf6d88de733ec6127a823138c0d
- SHA1 1cd5022f9c34f0d34d2420d321adb938cd591ec7
- SHA512 fb60cec9b5c135722ba4399e7a3c5314607bd11070cf26656771a7972204ca4cb07207fc474ed7dce8c40dc4a00e8e0f182897144fc0750eef014fcf91579f86
- SSDEEP 6144:ugye71cE4poJTqvpQLXNKFyLWD1nFairGcEOkCybEaQRuy8K:uI7OE4kopQzNKFyLWDHsOkxHy
- TLSH T180C48C2AB690D076C4B7D534C5E197AAEAB17432372449CFA3D0075A1F237E2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-09_f9537bf6d88de733ec6127a823138c0d_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_f9537bf6d88de733ec6127a823138c0d_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- SHA256 0177bac0312b02a6c5cb0b36858ea915401e4c0cf112bff2fecd2a3c65765050
- MD5 f9537bf6d88de733ec6127a823138c0d
- SHA1 1cd5022f9c34f0d34d2420d321adb938cd591ec7
- SHA512 fb60cec9b5c135722ba4399e7a3c5314607bd11070cf26656771a7972204ca4cb07207fc474ed7dce8c40dc4a00e8e0f182897144fc0750eef014fcf91579f86
- SSDEEP 6144:ugye71cE4poJTqvpQLXNKFyLWD1nFairGcEOkCybEaQRuy8K:uI7OE4kopQzNKFyLWDHsOkxHy
- TLSH T180C48C2AB690D076C4B7D534C5E197AAEAB17432372449CFA3D0075A1F237E2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory