General
- Target 2026-08-12_69c3358d82d66bd85743980e55fc2499_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- Sample260812-2at38sfk51
- SHA256 35c6bc2604e17406048fcf66a9d3017f07d1111c8f2ea2d3bfcb688d49419169
- MD5 69c3358d82d66bd85743980e55fc2499
- SHA1 97dd3807aab5a77040ce6de2f75268f9db141c2f
- SHA512 682389439c67f22d199c0f25808284a967c816109395cfa00d169ed0b79786806e109e3bdab1656f0cc74e4d5f71b0d761923c1a2af127cb1f0afdaf81b0e41c
- SSDEEP 6144:AcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:ASvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T119D45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-12_69c3358d82d66bd85743980e55fc2499_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-12_69c3358d82d66bd85743980e55fc2499_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- SHA256 35c6bc2604e17406048fcf66a9d3017f07d1111c8f2ea2d3bfcb688d49419169
- MD5 69c3358d82d66bd85743980e55fc2499
- SHA1 97dd3807aab5a77040ce6de2f75268f9db141c2f
- SHA512 682389439c67f22d199c0f25808284a967c816109395cfa00d169ed0b79786806e109e3bdab1656f0cc74e4d5f71b0d761923c1a2af127cb1f0afdaf81b0e41c
- SSDEEP 6144:AcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:ASvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T119D45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory