General
- Target 2026-08-10_ca490edfcb3ed84c3218a705ef113dd6_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- Sample260811-a9zn8adj41
- SHA256 6d792f901872a9d1fb8324252c28421aeacf56abb102a57ca3fe757140117128
- MD5 ca490edfcb3ed84c3218a705ef113dd6
- SHA1 2e65a7376e193ce55e187e505f2f61d11b7a330f
- SHA512 2d0335f4ee61fda036c59a0c7712babc1039d890ba0782a967c8394d161819b81c0fe7a89f9e408e8c27ff800501ca34d970c161977b63481f21cc8bf48370d6
- SSDEEP 6144:EWVrC1c2oonALgPLj7vf1LKlyIFVirGcEOkCybEaQRuy8K:EkCO2zVPX7vf1LKlIsOkxHy
- TLSH T1A0C47C29B690D076C4779574C4A197AAFAB1B432372449CFB3D00B5A1F237E2BA7530E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-10_ca490edfcb3ed84c3218a705ef113dd6_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_ca490edfcb3ed84c3218a705ef113dd6_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- SHA256 6d792f901872a9d1fb8324252c28421aeacf56abb102a57ca3fe757140117128
- MD5 ca490edfcb3ed84c3218a705ef113dd6
- SHA1 2e65a7376e193ce55e187e505f2f61d11b7a330f
- SHA512 2d0335f4ee61fda036c59a0c7712babc1039d890ba0782a967c8394d161819b81c0fe7a89f9e408e8c27ff800501ca34d970c161977b63481f21cc8bf48370d6
- SSDEEP 6144:EWVrC1c2oonALgPLj7vf1LKlyIFVirGcEOkCybEaQRuy8K:EkCO2zVPX7vf1LKlIsOkxHy
- TLSH T1A0C47C29B690D076C4779574C4A197AAFAB1B432372449CFB3D00B5A1F237E2BA7530E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory