General
- Target 2026-08-14_8b1bf2f2ba529c15a350672b58e070e5_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- Sample260814-bzhtdssdne
- SHA256 16a986d78e75735af675e8a07266612d00f45bd2aa712a71d8ee7187af0ec75f
- MD5 8b1bf2f2ba529c15a350672b58e070e5
- SHA1 ebbe177fe0cba2c3ce06a347f600e9fb2d7ac8f1
- SHA512 664ae084bb118c969a9a9709ff8ee01c1c49939b429b3c4a77755a82464da32946f0f137426feb10ead1d49f6b6a7d184d26d49c989a3e2fa913f26115521af0
- SSDEEP 6144:ncTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:nSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T10ED45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-14_8b1bf2f2ba529c15a350672b58e070e5_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-14_8b1bf2f2ba529c15a350672b58e070e5_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- SHA256 16a986d78e75735af675e8a07266612d00f45bd2aa712a71d8ee7187af0ec75f
- MD5 8b1bf2f2ba529c15a350672b58e070e5
- SHA1 ebbe177fe0cba2c3ce06a347f600e9fb2d7ac8f1
- SHA512 664ae084bb118c969a9a9709ff8ee01c1c49939b429b3c4a77755a82464da32946f0f137426feb10ead1d49f6b6a7d184d26d49c989a3e2fa913f26115521af0
- SSDEEP 6144:ncTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:nSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T10ED45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory