General
- Target 2026-08-09_86f1cbce04d2b84d082a88ac538fccbe_amadey_coinminer_elex_smoke-loader_stop
- Size 576KB
- Sample260809-yfqffsxyct
- SHA256 0025220146eeb1526e3ac728373fcc7c205e733f1cd4e1967bb517d9be834cc3
- MD5 86f1cbce04d2b84d082a88ac538fccbe
- SHA1 66b2e5d10a9e50b6f0e45ba1417c6223251a82ee
- SHA512 8911a8e89072d628a46be811c035b28d3f9ca8a6b211e0b408925563af07a08a0f963e704b82b806a9452ddae27e02c7b5a6bc8c3b96e5021d9df513bfe5442a
- SSDEEP 6144:lcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K/:lSvO2x9mONvKRwLSFtsOkx2LIa+yx
- TLSH T1BCC46D26B6908072C4779578C4A257AAFBB1BC2127204ACFA390775A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-09_86f1cbce04d2b84d082a88ac538fccbe_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_86f1cbce04d2b84d082a88ac538fccbe_amadey_coinminer_elex_smoke-loader_stop
- Size 576KB
- SHA256 0025220146eeb1526e3ac728373fcc7c205e733f1cd4e1967bb517d9be834cc3
- MD5 86f1cbce04d2b84d082a88ac538fccbe
- SHA1 66b2e5d10a9e50b6f0e45ba1417c6223251a82ee
- SHA512 8911a8e89072d628a46be811c035b28d3f9ca8a6b211e0b408925563af07a08a0f963e704b82b806a9452ddae27e02c7b5a6bc8c3b96e5021d9df513bfe5442a
- SSDEEP 6144:lcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K/:lSvO2x9mONvKRwLSFtsOkx2LIa+yx
- TLSH T1BCC46D26B6908072C4779578C4A257AAFBB1BC2127204ACFA390775A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory