General
- Target 2026-08-12_6476b31f5a04d349b78f9a8a9b47e8a9_amadey_coinminer_elex_smoke-loader_stop
- Size 761KB
- Sample260812-d7kn3axhlh
- SHA256 efb59ee09aac0b5830e371c5095316d475380bff835530bbb45534ff3594d89c
- MD5 6476b31f5a04d349b78f9a8a9b47e8a9
- SHA1 df310977784bcb50176c1080ed796337af9d41ab
- SHA512 c0b1dd2285fb10dd3240a0c603e958335116ea9f35dfa734bd051f8f2e7327edcbb30757c114b13870b9857451664bf31e87a23e26c3251842a87d7580102437
- SSDEEP 12288:TSvO2x9mONvKRwLSFtsOkxHya5hYIW0p98B:mvO2xJKRw2kOkxSkW298B
- TLSH T137F49E35A2808036C0B34532C6F94AABF9797D35631565CBA3843B662F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-12_6476b31f5a04d349b78f9a8a9b47e8a9_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-12_6476b31f5a04d349b78f9a8a9b47e8a9_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-12_6476b31f5a04d349b78f9a8a9b47e8a9_amadey_coinminer_elex_smoke-loader_stop
- Size 761KB
- SHA256 efb59ee09aac0b5830e371c5095316d475380bff835530bbb45534ff3594d89c
- MD5 6476b31f5a04d349b78f9a8a9b47e8a9
- SHA1 df310977784bcb50176c1080ed796337af9d41ab
- SHA512 c0b1dd2285fb10dd3240a0c603e958335116ea9f35dfa734bd051f8f2e7327edcbb30757c114b13870b9857451664bf31e87a23e26c3251842a87d7580102437
- SSDEEP 12288:TSvO2x9mONvKRwLSFtsOkxHya5hYIW0p98B:mvO2xJKRw2kOkxSkW298B
- TLSH T137F49E35A2808036C0B34532C6F94AABF9797D35631565CBA3843B662F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10- Custom signature
UPX dump on OEP (original entry point)
Executes dropped EXE
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
Drops file in System32 directory