General
- Target 2026-08-11_29c979c3f56c0c5756b98c849d630b09_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- Sample260811-vrmbdstzhy
- SHA256 cc31601a4ad94aff5d428ebe5f85134cf809cb4179ad82d9573b915dac62564d
- MD5 29c979c3f56c0c5756b98c849d630b09
- SHA1 717ae229eb5080277f2f4e9312c48bc98fefe6e3
- SHA512 05f45570a5300bdfe15674ea4d6de8d09142263d4836d0d062369e76b1c814e7f4af59afaf6d8c377eac2753266b05771780177f86c48a0ec424659e38294157
- SSDEEP 6144:kUJJuV1cdhIoA7vJ0CLoCgvDLe4AmFvirGcEOkCybEaQRuy8K:kYsVOdhElvkCgvDLe4usOkxHy
- TLSH T11AC48D29B6D0C036C5B39574C4A186BAEAB17432372549CFA3D5475A0F337E2BA7930E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-11_29c979c3f56c0c5756b98c849d630b09_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-11_29c979c3f56c0c5756b98c849d630b09_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- SHA256 cc31601a4ad94aff5d428ebe5f85134cf809cb4179ad82d9573b915dac62564d
- MD5 29c979c3f56c0c5756b98c849d630b09
- SHA1 717ae229eb5080277f2f4e9312c48bc98fefe6e3
- SHA512 05f45570a5300bdfe15674ea4d6de8d09142263d4836d0d062369e76b1c814e7f4af59afaf6d8c377eac2753266b05771780177f86c48a0ec424659e38294157
- SSDEEP 6144:kUJJuV1cdhIoA7vJ0CLoCgvDLe4AmFvirGcEOkCybEaQRuy8K:kYsVOdhElvkCgvDLe4usOkxHy
- TLSH T11AC48D29B6D0C036C5B39574C4A186BAEAB17432372549CFA3D5475A0F337E2BA7930E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory