General
- Target 2026-08-10_5756a64729f55877b717c8da9545598d_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- Sample260810-mjp4ba1xdv
- SHA256 4fa7cf0281d262c03215c23f8b3dd57725c648e618eebba8482822bf09408db6
- MD5 5756a64729f55877b717c8da9545598d
- SHA1 242dcfce16fbb803afc85b7f9b78cccbcf68ac80
- SHA512 feb3ef893d6e9f838cc07b10e6869097b61429ff36ca7ccf74730a088347abcdb8feaf10a99548db08891b803b9d3c3b20ef553201b1e420c0bb03e627627ce0
- SSDEEP 6144:uWVrC1c2oonALgPLj7vf1LKlyIFVirGcEOkCybEaQRuy8K:ukCO2zVPX7vf1LKlIsOkxHy
- TLSH T125C47C29B690D076C4779574C4A197AAFAB1B432372449CFB3D00B5A1F237E2BA7530E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-10_5756a64729f55877b717c8da9545598d_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_5756a64729f55877b717c8da9545598d_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- SHA256 4fa7cf0281d262c03215c23f8b3dd57725c648e618eebba8482822bf09408db6
- MD5 5756a64729f55877b717c8da9545598d
- SHA1 242dcfce16fbb803afc85b7f9b78cccbcf68ac80
- SHA512 feb3ef893d6e9f838cc07b10e6869097b61429ff36ca7ccf74730a088347abcdb8feaf10a99548db08891b803b9d3c3b20ef553201b1e420c0bb03e627627ce0
- SSDEEP 6144:uWVrC1c2oonALgPLj7vf1LKlyIFVirGcEOkCybEaQRuy8K:ukCO2zVPX7vf1LKlIsOkxHy
- TLSH T125C47C29B690D076C4779574C4A197AAFAB1B432372449CFB3D00B5A1F237E2BA7530E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory