General
- Target 2026-08-14_fe41a931a86b916ad3d52dca96e06fe2_amadey_coinminer_elex_smoke-loader_stop
- Size 395KB
- Sample260814-2ltxlsap7z
- SHA256 b6d6b08cac5afb80670526f7b519af993798e5ff50ddca63b2a615fb02c6f005
- MD5 fe41a931a86b916ad3d52dca96e06fe2
- SHA1 8a0e318564ebaed7c47fc4c4c369af1e268bdb91
- SHA512 6f659e337c64cdbd9424e465b4e053baab955def0e0c93bb6a2244a0add1a2cd1fea2829bf60cb8160f0c380937abc4a184c81799a7f4ff6e73b4361274214c5
- SSDEEP 6144:QcbcTgav1cdCTuoPbgwmOLJvKRILSFvdFDcEOkCybEaQRXr9HNdvOa:QCSvO2x9mONvKRILSFnOkx2LIa
- TLSH T17C846D2AB6A0D076C4B79579C4A247BAFBB1742137204ACFA390475A1F637E2BD3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-14_fe41a931a86b916ad3d52dca96e06fe2_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-14_fe41a931a86b916ad3d52dca96e06fe2_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-14_fe41a931a86b916ad3d52dca96e06fe2_amadey_coinminer_elex_smoke-loader_stop
- Size 395KB
- SHA256 b6d6b08cac5afb80670526f7b519af993798e5ff50ddca63b2a615fb02c6f005
- MD5 fe41a931a86b916ad3d52dca96e06fe2
- SHA1 8a0e318564ebaed7c47fc4c4c369af1e268bdb91
- SHA512 6f659e337c64cdbd9424e465b4e053baab955def0e0c93bb6a2244a0add1a2cd1fea2829bf60cb8160f0c380937abc4a184c81799a7f4ff6e73b4361274214c5
- SSDEEP 6144:QcbcTgav1cdCTuoPbgwmOLJvKRILSFvdFDcEOkCybEaQRXr9HNdvOa:QCSvO2x9mONvKRILSFnOkx2LIa
- TLSH T17C846D2AB6A0D076C4B79579C4A247BAFBB1742137204ACFA390475A1F637E2BD3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory