General
- Target 2026-08-12_359327754b1028e66da11342fc13df5f_amadey_coinminer_elex_smoke-loader_stop
- Size 525KB
- Sample260812-eaachaad25
- SHA256 1a733d14884e75e771c44c81d53210a5f8522d3b84281151a0c81213062dbbfa
- MD5 359327754b1028e66da11342fc13df5f
- SHA1 66ec21c5362d044c24a40c093a590928c0f2f65b
- SHA512 ec708195cd69be4523d03fa979ccbf9ab2db4063924e6c3e56da1390800d6fa71341e85ebcbfbdcc165cc806d7067a5a79e716ac7ea3851aa3285ceb25eb9eaa
- SSDEEP 6144:xcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K:xSvO2x9mONvKRwLSFtsOkx2LIa+y
- TLSH T1B1B47D2AB6A0D076C4779579C4A257BAFBB1742137204ACFA390475A1F237E2BE3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-12_359327754b1028e66da11342fc13df5f_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-12_359327754b1028e66da11342fc13df5f_amadey_coinminer_elex_smoke-loader_stop
- Size 525KB
- SHA256 1a733d14884e75e771c44c81d53210a5f8522d3b84281151a0c81213062dbbfa
- MD5 359327754b1028e66da11342fc13df5f
- SHA1 66ec21c5362d044c24a40c093a590928c0f2f65b
- SHA512 ec708195cd69be4523d03fa979ccbf9ab2db4063924e6c3e56da1390800d6fa71341e85ebcbfbdcc165cc806d7067a5a79e716ac7ea3851aa3285ceb25eb9eaa
- SSDEEP 6144:xcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K:xSvO2x9mONvKRwLSFtsOkx2LIa+y
- TLSH T1B1B47D2AB6A0D076C4779579C4A257BAFBB1742137204ACFA390475A1F237E2BE3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Custom signature
UPX dump on OEP (original entry point)
Executes dropped EXE
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
Drops file in System32 directory