General
- Target 2026-08-13_9b2343cd349ee306316faa15cf79bc8d_amadey_coinminer_elex_smoke-loader_stop
- Size 525KB
- Sample260813-epbtwaar3y
- SHA256 1a86dc2449558a9943a465654a122289f9cebb18088eae061e01a399956c5057
- MD5 9b2343cd349ee306316faa15cf79bc8d
- SHA1 310e97321d5236d60f6073ac7366267cac665bc3
- SHA512 21fcd4f585040ed88c592889a112becc6ce90699a4e9103aece1efff114813160dcfa20c8fa2d3713dd293bbf2dfaf287727dccedf857360a625e9ce2d35e969
- SSDEEP 6144:UcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K:USvO2x9mONvKRwLSFtsOkx2LIa+y
- TLSH T198B47D2AB6A0D076C4779579C4A257BAFBB1742137204ACFA390475A1F237E2BE3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-13_9b2343cd349ee306316faa15cf79bc8d_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-13_9b2343cd349ee306316faa15cf79bc8d_amadey_coinminer_elex_smoke-loader_stop
- Size 525KB
- SHA256 1a86dc2449558a9943a465654a122289f9cebb18088eae061e01a399956c5057
- MD5 9b2343cd349ee306316faa15cf79bc8d
- SHA1 310e97321d5236d60f6073ac7366267cac665bc3
- SHA512 21fcd4f585040ed88c592889a112becc6ce90699a4e9103aece1efff114813160dcfa20c8fa2d3713dd293bbf2dfaf287727dccedf857360a625e9ce2d35e969
- SSDEEP 6144:UcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K:USvO2x9mONvKRwLSFtsOkx2LIa+y
- TLSH T198B47D2AB6A0D076C4779579C4A257BAFBB1742137204ACFA390475A1F237E2BE3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory