General
- Target 2026-08-13_cb5ba301c4d0a2e3e7f44fd485e127af_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- Sample260813-dzpytage78
- SHA256 4de63692512c81781e0be19eae76d6c7381eeb9c7cd07997edc17556942045b3
- MD5 cb5ba301c4d0a2e3e7f44fd485e127af
- SHA1 ba6eb2cb862fe48081ee366d593b06e85fdd1d06
- SHA512 60a27455fab2b9042a07ee4789f310edd4aa1751a23d585641894082e501e8227f71e93660cc9050166d6e1f64bb18173ee0c96234776b4ffdbd5f7c971e07c6
- SSDEEP 6144:84ZaN1cb90oOTFmIFLq0cvnXhLCqj2EFNirGcEOkCybEaQRuy8K:8rNOb9+sIF+0cvnXhLCqEsOkxHy
- TLSH T1EBC48D29B6E0C076C4B79578C4A186B6FAB17832372459CFA394075A1F337E2BA3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-13_cb5ba301c4d0a2e3e7f44fd485e127af_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-13_cb5ba301c4d0a2e3e7f44fd485e127af_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- SHA256 4de63692512c81781e0be19eae76d6c7381eeb9c7cd07997edc17556942045b3
- MD5 cb5ba301c4d0a2e3e7f44fd485e127af
- SHA1 ba6eb2cb862fe48081ee366d593b06e85fdd1d06
- SHA512 60a27455fab2b9042a07ee4789f310edd4aa1751a23d585641894082e501e8227f71e93660cc9050166d6e1f64bb18173ee0c96234776b4ffdbd5f7c971e07c6
- SSDEEP 6144:84ZaN1cb90oOTFmIFLq0cvnXhLCqj2EFNirGcEOkCybEaQRuy8K:8rNOb9+sIF+0cvnXhLCqEsOkxHy
- TLSH T1EBC48D29B6E0C076C4B79578C4A186B6FAB17832372459CFA394075A1F337E2BA3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory