General
- Target 2026-08-11_ad79918818039d45570792defca4e702_amadey_coinminer_elex_smoke-loader_stop
- Size 761KB
- Sample260811-s83zcswbrd
- SHA256 727ebb89edbe44fcba22145065f84a7f4d9418cf7edcaa6b9fff4afbd36301d8
- MD5 ad79918818039d45570792defca4e702
- SHA1 876a702444215f21d36ba7406d28ef54edfe9749
- SHA512 519f12a111541b7aa01bff34ca9c33119f529dcae479a47f113e57f54ddbf10ab634506a5079f75ecc316153eb5b282332199faf862648078a3bab1e55402f4e
- SSDEEP 12288:dSvO2x9mONvKRwLSFtsOkxHya5hYIW0p98B:8vO2xJKRw2kOkxSkW298B
- TLSH T14DF49E35A2808036C0B34532C6F94AABF9797D35631565CBA3843B662F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-11_ad79918818039d45570792defca4e702_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-11_ad79918818039d45570792defca4e702_amadey_coinminer_elex_smoke-loader_stop
- Size 761KB
- SHA256 727ebb89edbe44fcba22145065f84a7f4d9418cf7edcaa6b9fff4afbd36301d8
- MD5 ad79918818039d45570792defca4e702
- SHA1 876a702444215f21d36ba7406d28ef54edfe9749
- SHA512 519f12a111541b7aa01bff34ca9c33119f529dcae479a47f113e57f54ddbf10ab634506a5079f75ecc316153eb5b282332199faf862648078a3bab1e55402f4e
- SSDEEP 12288:dSvO2x9mONvKRwLSFtsOkxHya5hYIW0p98B:8vO2xJKRw2kOkxSkW298B
- TLSH T14DF49E35A2808036C0B34532C6F94AABF9797D35631565CBA3843B662F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory