General
- Target 2026-08-13_43c197f3f279666a8da05dd724dfcd19_amadey_coinminer_elex_smoke-loader_stop
- Size 761KB
- Sample260813-lt2dnav1cw
- SHA256 f02e288e2e2304f9c92274de352ca80d34019d7d8e9a355325712bf22c20e57b
- MD5 43c197f3f279666a8da05dd724dfcd19
- SHA1 8858068adba5571deaaeb79de4d7c14b4dfea583
- SHA512 d91e1556d36bc35a5b27e7545f826a1c25c9445f62b64a6a0736a090f20c0ef9738e904d4a0de2a0c31031a20bb0fdc5a2dd934e37c7bede5907160b2ef22963
- SSDEEP 12288:pSvO2x9mONvKRwLSFtsOkxHya5hYIW0p98B:QvO2xJKRw2kOkxSkW298B
- TLSH T17FF49E35A2808036C0B34532C6F94AABF9797D35631565CBA3843B662F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-13_43c197f3f279666a8da05dd724dfcd19_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-13_43c197f3f279666a8da05dd724dfcd19_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-13_43c197f3f279666a8da05dd724dfcd19_amadey_coinminer_elex_smoke-loader_stop
- Size 761KB
- SHA256 f02e288e2e2304f9c92274de352ca80d34019d7d8e9a355325712bf22c20e57b
- MD5 43c197f3f279666a8da05dd724dfcd19
- SHA1 8858068adba5571deaaeb79de4d7c14b4dfea583
- SHA512 d91e1556d36bc35a5b27e7545f826a1c25c9445f62b64a6a0736a090f20c0ef9738e904d4a0de2a0c31031a20bb0fdc5a2dd934e37c7bede5907160b2ef22963
- SSDEEP 12288:pSvO2x9mONvKRwLSFtsOkxHya5hYIW0p98B:QvO2xJKRw2kOkxSkW298B
- TLSH T17FF49E35A2808036C0B34532C6F94AABF9797D35631565CBA3843B662F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory