General
- Target 2026-08-12_bfda8a53f1b1669da3a8916db6eb8462_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- Sample260812-e2jegsvyfx
- SHA256 d3d0e6618ad439844242ca29afdc2aff3b1bbced5e2e30ae6802a3bbacc342bf
- MD5 bfda8a53f1b1669da3a8916db6eb8462
- SHA1 1913867af8312b99f556ee71216e47c822c723a3
- SHA512 066dc041a961be436cc2fe1fc7eaf845d73d434d47dfdbe7023c2e34bc7a1776bccaaf56417f84efe264e3c956bc1bf95ac980292a79bbe9fb1adbb225006521
- SSDEEP 6144:ccTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:cSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T12ED45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-12_bfda8a53f1b1669da3a8916db6eb8462_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-12_bfda8a53f1b1669da3a8916db6eb8462_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- SHA256 d3d0e6618ad439844242ca29afdc2aff3b1bbced5e2e30ae6802a3bbacc342bf
- MD5 bfda8a53f1b1669da3a8916db6eb8462
- SHA1 1913867af8312b99f556ee71216e47c822c723a3
- SHA512 066dc041a961be436cc2fe1fc7eaf845d73d434d47dfdbe7023c2e34bc7a1776bccaaf56417f84efe264e3c956bc1bf95ac980292a79bbe9fb1adbb225006521
- SSDEEP 6144:ccTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:cSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T12ED45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory