General
- Target 2026-08-14_2747948e71f61af59b6eee57334a1ba4_amadey_coinminer_elex_smoke-loader_stop
- Size 525KB
- Sample260814-mr3dls1fnd
- SHA256 a08d390ffa87561b43547a55981d651373b1ca2ce7105800ae45b447a0489ac8
- MD5 2747948e71f61af59b6eee57334a1ba4
- SHA1 25317ff4607c8f24004e61f81a27524056f3efab
- SHA512 6535f09c0a84483ceac248eebbbadbb5d574584ca60e2045cda43e31d159e9e1587f6098c435dec7eceadff936fa86323932f58483af305d7c639f396cfbcd1a
- SSDEEP 6144:IcTgav1cdCTuoPbgwmOLJvKRhLSFXdFwirGcEOkCybEaQRXr9HNdvOaey8K:ISvO2x9mONvKRhLSFtsOkx2LIaey
- TLSH T1B6B47D2AB6A0D076C4779579C4A257BAFBB1742137204ACFA390475A1F237E2BE3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-14_2747948e71f61af59b6eee57334a1ba4_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-14_2747948e71f61af59b6eee57334a1ba4_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-14_2747948e71f61af59b6eee57334a1ba4_amadey_coinminer_elex_smoke-loader_stop
- Size 525KB
- SHA256 a08d390ffa87561b43547a55981d651373b1ca2ce7105800ae45b447a0489ac8
- MD5 2747948e71f61af59b6eee57334a1ba4
- SHA1 25317ff4607c8f24004e61f81a27524056f3efab
- SHA512 6535f09c0a84483ceac248eebbbadbb5d574584ca60e2045cda43e31d159e9e1587f6098c435dec7eceadff936fa86323932f58483af305d7c639f396cfbcd1a
- SSDEEP 6144:IcTgav1cdCTuoPbgwmOLJvKRhLSFXdFwirGcEOkCybEaQRXr9HNdvOaey8K:ISvO2x9mONvKRhLSFtsOkx2LIaey
- TLSH T1B6B47D2AB6A0D076C4779579C4A257BAFBB1742137204ACFA390475A1F237E2BE3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory