General
- Target 2026-08-11_d66b50f7dfcb97cfd0967ef9edf6b7f7_amadey_coinminer_elex_smoke-loader_stop
- Size 576KB
- Sample260811-jmx2jsvvhv
- SHA256 bb5d735d5b26f447758bce130389d3bc814c7ccd8dc38525ef3d236f327368ad
- MD5 d66b50f7dfcb97cfd0967ef9edf6b7f7
- SHA1 13a06a5dbc9f4964468b2e70ca1b1d7dddb3c366
- SHA512 87b08a34303813aeef5844a24a99761301f609ff6781bb55e2ad47608fb4d5ec0273d1c6f549a9df6f34b332c52e0d3dfd9ba46edf27acfc1b8a9dc77c6b452c
- SSDEEP 6144:JcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K/:JSvO2x9mONvKRwLSFtsOkx2LIa+yx
- TLSH T162C46D26B6908072C4779578C4A257AAFBB1BC2127204ACFA390775A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-11_d66b50f7dfcb97cfd0967ef9edf6b7f7_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-11_d66b50f7dfcb97cfd0967ef9edf6b7f7_amadey_coinminer_elex_smoke-loader_stop
- Size 576KB
- SHA256 bb5d735d5b26f447758bce130389d3bc814c7ccd8dc38525ef3d236f327368ad
- MD5 d66b50f7dfcb97cfd0967ef9edf6b7f7
- SHA1 13a06a5dbc9f4964468b2e70ca1b1d7dddb3c366
- SHA512 87b08a34303813aeef5844a24a99761301f609ff6781bb55e2ad47608fb4d5ec0273d1c6f549a9df6f34b332c52e0d3dfd9ba46edf27acfc1b8a9dc77c6b452c
- SSDEEP 6144:JcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K/:JSvO2x9mONvKRwLSFtsOkx2LIa+yx
- TLSH T162C46D26B6908072C4779578C4A257AAFBB1BC2127204ACFA390775A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory