General
- Target 2026-08-14_5c8117d4e0625929dd241dae4d12929f_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- Sample260814-b4d11aaq81
- SHA256 cca67e371e2af3d75e064434374fff42212c19d42b5efb08b1f2d1ae52c938e6
- MD5 5c8117d4e0625929dd241dae4d12929f
- SHA1 ce156f7764e7c6de2921e7089421927a4e2e9240
- SHA512 4bc4764dbd6a6b79005b87ae5ca47271d6985f975d67b554dbbb439142a775196dddb182ee776f5d188f951dfce4f044c93c937d4e0e0721474df7c578668a09
- SSDEEP 6144:k4ZaN1cb90oOTFmIFLq0cvnXhLCqj2EFNirGcEOkCybEaQRuy8K:krNOb9+sIF+0cvnXhLCqEsOkxHy
- TLSH T1B4C48D29B6E0C076C4B79578C4A186B6FAB17832372459CFA394075A1F337E2BA3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-14_5c8117d4e0625929dd241dae4d12929f_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-14_5c8117d4e0625929dd241dae4d12929f_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- SHA256 cca67e371e2af3d75e064434374fff42212c19d42b5efb08b1f2d1ae52c938e6
- MD5 5c8117d4e0625929dd241dae4d12929f
- SHA1 ce156f7764e7c6de2921e7089421927a4e2e9240
- SHA512 4bc4764dbd6a6b79005b87ae5ca47271d6985f975d67b554dbbb439142a775196dddb182ee776f5d188f951dfce4f044c93c937d4e0e0721474df7c578668a09
- SSDEEP 6144:k4ZaN1cb90oOTFmIFLq0cvnXhLCqj2EFNirGcEOkCybEaQRuy8K:krNOb9+sIF+0cvnXhLCqEsOkxHy
- TLSH T1B4C48D29B6E0C076C4B79578C4A186B6FAB17832372459CFA394075A1F337E2BA3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory