General
- Target 2026-08-13_c7072c8add9f30ad42fca85fc230672a_amadey_coinminer_elex_smoke-loader_stop
- Size 576KB
- Sample260813-d4p5daan31
- SHA256 9820073e05233933953996c63c2f1215cc1a376385bda7a97eb44db6c908dcc7
- MD5 c7072c8add9f30ad42fca85fc230672a
- SHA1 73f6b08de7355a1407a5f6d3aa3b85369a3d3987
- SHA512 72df1ea6c02d2fa74fd9df1406c557ff95c17c5ca60f9d29038b1cdf817bfc9a945368adf5bd220d4eaeeb73400aea3c1f1a725c1cdd4a0dcdc272b90e11e0a0
- SSDEEP 6144:2cTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K/:2SvO2x9mONvKRwLSFtsOkx2LIa+yx
- TLSH T19AC46D26B6908072C4779578C4A257AAFBB1BC2127204ACFA390775A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-13_c7072c8add9f30ad42fca85fc230672a_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-13_c7072c8add9f30ad42fca85fc230672a_amadey_coinminer_elex_smoke-loader_stop
- Size 576KB
- SHA256 9820073e05233933953996c63c2f1215cc1a376385bda7a97eb44db6c908dcc7
- MD5 c7072c8add9f30ad42fca85fc230672a
- SHA1 73f6b08de7355a1407a5f6d3aa3b85369a3d3987
- SHA512 72df1ea6c02d2fa74fd9df1406c557ff95c17c5ca60f9d29038b1cdf817bfc9a945368adf5bd220d4eaeeb73400aea3c1f1a725c1cdd4a0dcdc272b90e11e0a0
- SSDEEP 6144:2cTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K/:2SvO2x9mONvKRwLSFtsOkx2LIa+yx
- TLSH T19AC46D26B6908072C4779578C4A257AAFBB1BC2127204ACFA390775A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory