General
- Target 2026-08-10_552aeb5c447e65cceea54f684a65d31b_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- Sample260810-mj8knafe49
- SHA256 f4edd46e0c6340fac47ddc3d99dbba713ddea85b6cb00e50be18faa44043d713
- MD5 552aeb5c447e65cceea54f684a65d31b
- SHA1 3ea62ba8eeabe6325f77edaf38628da74690aa80
- SHA512 36c8a310ec7873bd14b3baf0005a904d71b975f97a87297d8266769abb73253cb67df2d16baf5cb5281aae730123ec459685c4ea5ce03ca5377c36a8cc7fb0b0
- SSDEEP 6144:WUJJuV1cdhIoA7vJ0CLoCgvDLe4AmFvirGcEOkCybEaQRuy8K:WYsVOdhElvkCgvDLe4usOkxHy
- TLSH T1A7C48D29B6D0C036C5B39574C4A186BAEAB17432372549CFA3D5475A0F337E2BA7930E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-10_552aeb5c447e65cceea54f684a65d31b_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_552aeb5c447e65cceea54f684a65d31b_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_552aeb5c447e65cceea54f684a65d31b_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- SHA256 f4edd46e0c6340fac47ddc3d99dbba713ddea85b6cb00e50be18faa44043d713
- MD5 552aeb5c447e65cceea54f684a65d31b
- SHA1 3ea62ba8eeabe6325f77edaf38628da74690aa80
- SHA512 36c8a310ec7873bd14b3baf0005a904d71b975f97a87297d8266769abb73253cb67df2d16baf5cb5281aae730123ec459685c4ea5ce03ca5377c36a8cc7fb0b0
- SSDEEP 6144:WUJJuV1cdhIoA7vJ0CLoCgvDLe4AmFvirGcEOkCybEaQRuy8K:WYsVOdhElvkCgvDLe4usOkxHy
- TLSH T1A7C48D29B6D0C036C5B39574C4A186BAEAB17432372549CFA3D5475A0F337E2BA7930E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory