General
- Target 2026-08-14_da9f7fd98eb58e951f1e4a4c8b025e3c_amadey_coinminer_elex_smoke-loader_stop
- Size 766KB
- Sample260814-2v37mstbnf
- SHA256 e66d8d2c8127f7eb943cbf32cebd96464fe4994907efac332dda83044b62981b
- MD5 da9f7fd98eb58e951f1e4a4c8b025e3c
- SHA1 e5ea9baaa321d0971e780e3434454ac3729a351f
- SHA512 819759affff0a54fc22b1806958e1ec0bb2e9cdb8ca15e7ca085a97727c44aa40dc64632870b7d8187629a895e44eea913eee8d535742abda033dc3b81ae2137
- SSDEEP 12288:gSvO2x9mONvKRwLSFtsOkx2LIa+ya5FAQjU/Liw:7vO2xJKRw2kOkx2LFRvcUV
- TLSH T1B7F45A31E241C03AD0A74576C6FA0BAFE564BD25531155CBA3C43A6A2FB36D2BE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-14_da9f7fd98eb58e951f1e4a4c8b025e3c_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-14_da9f7fd98eb58e951f1e4a4c8b025e3c_amadey_coinminer_elex_smoke-loader_stop
- Size 766KB
- SHA256 e66d8d2c8127f7eb943cbf32cebd96464fe4994907efac332dda83044b62981b
- MD5 da9f7fd98eb58e951f1e4a4c8b025e3c
- SHA1 e5ea9baaa321d0971e780e3434454ac3729a351f
- SHA512 819759affff0a54fc22b1806958e1ec0bb2e9cdb8ca15e7ca085a97727c44aa40dc64632870b7d8187629a895e44eea913eee8d535742abda033dc3b81ae2137
- SSDEEP 12288:gSvO2x9mONvKRwLSFtsOkx2LIa+ya5FAQjU/Liw:7vO2xJKRw2kOkx2LFRvcUV
- TLSH T1B7F45A31E241C03AD0A74576C6FA0BAFE564BD25531155CBA3C43A6A2FB36D2BE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory