General
- Target 2026-08-10_78f43e9bd415d97a2d0665d5e301ea1c_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- Sample260810-mch2esfl4t
- SHA256 734808e0c51feefde697b333830141984f178d42f614ca6213562b9ba40cd8e3
- MD5 78f43e9bd415d97a2d0665d5e301ea1c
- SHA1 5db12215d262fb8676e8759430ac248e66608120
- SHA512 4adde11b2f97986b5ea4ea34153e6820c00fb2c2faa5a83060ed2ef996007addb684ecc1925eb00f14ab368d314454cf0738d7c1cfcfae58bf5709517e752bf9
- SSDEEP 6144:LcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:LSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T182D45B35A6808036C0B74631C6F64BAAF9B5BC21631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-10_78f43e9bd415d97a2d0665d5e301ea1c_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_78f43e9bd415d97a2d0665d5e301ea1c_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- SHA256 734808e0c51feefde697b333830141984f178d42f614ca6213562b9ba40cd8e3
- MD5 78f43e9bd415d97a2d0665d5e301ea1c
- SHA1 5db12215d262fb8676e8759430ac248e66608120
- SHA512 4adde11b2f97986b5ea4ea34153e6820c00fb2c2faa5a83060ed2ef996007addb684ecc1925eb00f14ab368d314454cf0738d7c1cfcfae58bf5709517e752bf9
- SSDEEP 6144:LcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:LSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T182D45B35A6808036C0B74631C6F64BAAF9B5BC21631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory