General
- Target 2026-08-10_9620bef14aa1d1fa7803f2b106982d58_amadey_coinminer_elex_smoke-loader_stop
- Size 525KB
- Sample260810-yrpcjaxbpb
- SHA256 80da9df204c18ba1359fae7c52861ac7d614132b77e2254b77c1096674c836e9
- MD5 9620bef14aa1d1fa7803f2b106982d58
- SHA1 e7257189878de939fa0dff146e77778b552a7274
- SHA512 f11acf576ab503da270c0f8017ad92081607d8dbbf2d1b7e5bcaeebc0e99201057ddd8b3427558873ab5bae4779655032f3f4cdf323f8ec69c491f6e8f07e84c
- SSDEEP 6144:OcTgav1cdCTuoPbgwmOLJvKRhLSFXdFwirGcEOkCybEaQRXr9HNdvOaey8K:OSvO2x9mONvKRhLSFtsOkx2LIaey
- TLSH T13BB47D2AB6A0D076C4779579C4A257BAFBB1742137204ACFA390475A1F237E2BE3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-10_9620bef14aa1d1fa7803f2b106982d58_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_9620bef14aa1d1fa7803f2b106982d58_amadey_coinminer_elex_smoke-loader_stop
- Size 525KB
- SHA256 80da9df204c18ba1359fae7c52861ac7d614132b77e2254b77c1096674c836e9
- MD5 9620bef14aa1d1fa7803f2b106982d58
- SHA1 e7257189878de939fa0dff146e77778b552a7274
- SHA512 f11acf576ab503da270c0f8017ad92081607d8dbbf2d1b7e5bcaeebc0e99201057ddd8b3427558873ab5bae4779655032f3f4cdf323f8ec69c491f6e8f07e84c
- SSDEEP 6144:OcTgav1cdCTuoPbgwmOLJvKRhLSFXdFwirGcEOkCybEaQRXr9HNdvOaey8K:OSvO2x9mONvKRhLSFtsOkx2LIaey
- TLSH T13BB47D2AB6A0D076C4779579C4A257BAFBB1742137204ACFA390475A1F237E2BE3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory