General
- Target 2026-08-14_e90b5bada4fe6ad7c0566397fd0b4227_amadey_coinminer_elex_smoke-loader_stop
- Size 511KB
- Sample260814-brplzaee32
- SHA256 4fa6a9c19b6facfe4b387dab34fd6e9bf1a8e0c68150f460d7919fc02ac1905e
- MD5 e90b5bada4fe6ad7c0566397fd0b4227
- SHA1 af1258d18a31b05cb3f43c86db2e6acce1306bc9
- SHA512 2e9eeda119269c34ea8bafced68efbc81927efea71040d4a0b196cee350e92ecf358cf95c2d98106ce6bb402ad4e88a9be995e98bd2cbeba08e8fa1d1a7fbe00
- SSDEEP 6144:ncTgav1cdCTuoPbgwmOLJvKRILSFvdFDcEOkCybEaQRXr9HNdvOax5Rv0:nSvO2x9mONvKRILSFnOkx2LIax5F0
- TLSH T1F6B45C26F6908036C4B34575C5F64BAAFAB4BC21631156CBA3943A6A1F737D2BD3130E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-14_e90b5bada4fe6ad7c0566397fd0b4227_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-14_e90b5bada4fe6ad7c0566397fd0b4227_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-14_e90b5bada4fe6ad7c0566397fd0b4227_amadey_coinminer_elex_smoke-loader_stop
- Size 511KB
- SHA256 4fa6a9c19b6facfe4b387dab34fd6e9bf1a8e0c68150f460d7919fc02ac1905e
- MD5 e90b5bada4fe6ad7c0566397fd0b4227
- SHA1 af1258d18a31b05cb3f43c86db2e6acce1306bc9
- SHA512 2e9eeda119269c34ea8bafced68efbc81927efea71040d4a0b196cee350e92ecf358cf95c2d98106ce6bb402ad4e88a9be995e98bd2cbeba08e8fa1d1a7fbe00
- SSDEEP 6144:ncTgav1cdCTuoPbgwmOLJvKRILSFvdFDcEOkCybEaQRXr9HNdvOax5Rv0:nSvO2x9mONvKRILSFnOkx2LIax5F0
- TLSH T1F6B45C26F6908036C4B34575C5F64BAAFAB4BC21631156CBA3943A6A1F737D2BD3130E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory