General
- Target 2026-08-10_3f9dca99bd7198143da6fcc7ebbfc583_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- Sample260811-bs6xmsysht
- SHA256 6e29589e6b94208958b3e68c4734e4cf1af0654b1261611c0213eaed96611617
- MD5 3f9dca99bd7198143da6fcc7ebbfc583
- SHA1 c4d658cbbcb4864fb272180bac11c3c5f71a80c4
- SHA512 8a7abbc9e448e36305b32e0408bff5f28ef7e2799a5e967564a604505f4e309ce91d6a74746d4ecd5ea630516a5110ed68d50a231b49369b3c2541025960d91a
- SSDEEP 6144:jcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:jSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T110D45B35A6808036C0B74631C6F64BAAF9B5BC21631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-10_3f9dca99bd7198143da6fcc7ebbfc583_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_3f9dca99bd7198143da6fcc7ebbfc583_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_3f9dca99bd7198143da6fcc7ebbfc583_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- SHA256 6e29589e6b94208958b3e68c4734e4cf1af0654b1261611c0213eaed96611617
- MD5 3f9dca99bd7198143da6fcc7ebbfc583
- SHA1 c4d658cbbcb4864fb272180bac11c3c5f71a80c4
- SHA512 8a7abbc9e448e36305b32e0408bff5f28ef7e2799a5e967564a604505f4e309ce91d6a74746d4ecd5ea630516a5110ed68d50a231b49369b3c2541025960d91a
- SSDEEP 6144:jcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:jSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T110D45B35A6808036C0B74631C6F64BAAF9B5BC21631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory