General
- Target 2026-08-12_390893b07c9b65ee0a5aa6268f1aedbd_amadey_coinminer_elex_smoke-loader_stop
- Size 576KB
- Sample260812-kss58abf35
- SHA256 6c7de49243248afec8bd29cfd81126fab3cf594b5c88f141eb80b9543abee45c
- MD5 390893b07c9b65ee0a5aa6268f1aedbd
- SHA1 77d94116d2bd138a90164b0c1d19891c86d4cc9c
- SHA512 8655b8df87b0c22d7301ec0ac2ce5bfbaf78cf290642522c3324f9109bc6a64ba32b4d2be9eba188ebccede59fba14b8303bed94107300e0b3e6ff99f511df9f
- SSDEEP 6144:AcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K/:ASvO2x9mONvKRwLSFtsOkx2LIa+yx
- TLSH T1EEC46D26B6908072C4779578C4A257AAFBB1BC2127204ACFA390775A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-12_390893b07c9b65ee0a5aa6268f1aedbd_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-12_390893b07c9b65ee0a5aa6268f1aedbd_amadey_coinminer_elex_smoke-loader_stop
- Size 576KB
- SHA256 6c7de49243248afec8bd29cfd81126fab3cf594b5c88f141eb80b9543abee45c
- MD5 390893b07c9b65ee0a5aa6268f1aedbd
- SHA1 77d94116d2bd138a90164b0c1d19891c86d4cc9c
- SHA512 8655b8df87b0c22d7301ec0ac2ce5bfbaf78cf290642522c3324f9109bc6a64ba32b4d2be9eba188ebccede59fba14b8303bed94107300e0b3e6ff99f511df9f
- SSDEEP 6144:AcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K/:ASvO2x9mONvKRwLSFtsOkx2LIa+yx
- TLSH T1EEC46D26B6908072C4779578C4A257AAFBB1BC2127204ACFA390775A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory