General
- Target 2026-08-11_5a413c62768613925d7fea36d17e8214_amadey_coinminer_elex_smoke-loader_stop
- Size 576KB
- Sample260811-tdcdlagr4s
- SHA256 bc7dddde4f2cef271fe4f4adc996607467b943dde65cbfb2dba24959edaeaa03
- MD5 5a413c62768613925d7fea36d17e8214
- SHA1 ab4ca583fb25d3879b521b9159ca928defec2129
- SHA512 7473ab1379280c59ddeca8ce709cf63b5d537c3aef77c5da745f686ac87f34db8215657973d9cb373339c1569e5bc2fa19d0069ba53388e7dae008265c4e56e9
- SSDEEP 6144:KcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K/:KSvO2x9mONvKRwLSFtsOkx2LIa+yx
- TLSH T172C46D26B6908072C4779578C4A257AAFBB1BC2127204ACFA390775A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-11_5a413c62768613925d7fea36d17e8214_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-11_5a413c62768613925d7fea36d17e8214_amadey_coinminer_elex_smoke-loader_stop
- Size 576KB
- SHA256 bc7dddde4f2cef271fe4f4adc996607467b943dde65cbfb2dba24959edaeaa03
- MD5 5a413c62768613925d7fea36d17e8214
- SHA1 ab4ca583fb25d3879b521b9159ca928defec2129
- SHA512 7473ab1379280c59ddeca8ce709cf63b5d537c3aef77c5da745f686ac87f34db8215657973d9cb373339c1569e5bc2fa19d0069ba53388e7dae008265c4e56e9
- SSDEEP 6144:KcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K/:KSvO2x9mONvKRwLSFtsOkx2LIa+yx
- TLSH T172C46D26B6908072C4779578C4A257AAFBB1BC2127204ACFA390775A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory