General
- Target 2026-08-13_42252d997731be539fbb9ca3e2096304_amadey_coinminer_elex_smoke-loader_stop
- Size 615KB
- Sample260813-ftmbva1tav
- SHA256 0f6db48f66ecbc1837d3bd82fef199926b891d8c96a4909ab1d67af1d11ad359
- MD5 42252d997731be539fbb9ca3e2096304
- SHA1 8c4c63884e4bdf421662234cd4dcaf0243f024a0
- SHA512 6387246fd23b732945c6bc74b4842f3b8978b4f8b26d1d71984b0338b239afa80af0404291a0edefdf1e4f8b623becbde6a2263b369888d54b282a4340a255a3
- SSDEEP 12288:gSvO2x9mONvKRILSFnOkx2LIax5FAQjU/Liw:7vO2xJKRI2FOkx2LFicUV
- TLSH T169D44A31E241C03AD4A74576C6FA0BAFE5647D25531165CBA3C43A2A2FB36D2BE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-13_42252d997731be539fbb9ca3e2096304_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-13_42252d997731be539fbb9ca3e2096304_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-13_42252d997731be539fbb9ca3e2096304_amadey_coinminer_elex_smoke-loader_stop
- Size 615KB
- SHA256 0f6db48f66ecbc1837d3bd82fef199926b891d8c96a4909ab1d67af1d11ad359
- MD5 42252d997731be539fbb9ca3e2096304
- SHA1 8c4c63884e4bdf421662234cd4dcaf0243f024a0
- SHA512 6387246fd23b732945c6bc74b4842f3b8978b4f8b26d1d71984b0338b239afa80af0404291a0edefdf1e4f8b623becbde6a2263b369888d54b282a4340a255a3
- SSDEEP 12288:gSvO2x9mONvKRILSFnOkx2LIax5FAQjU/Liw:7vO2xJKRI2FOkx2LFicUV
- TLSH T169D44A31E241C03AD4A74576C6FA0BAFE5647D25531165CBA3C43A2A2FB36D2BE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory