General
- Target 2026-08-15_81b9c7fe356715c486d36a96f1ecb304_amadey_coinminer_elex_smoke-loader_stop
- Size 615KB
- Sample260815-d6t64sdf65
- SHA256 b78ea25f9c047a479d4704c9b3d301e6b1c98b224e2afe8b0d5cd556f9e876c9
- MD5 81b9c7fe356715c486d36a96f1ecb304
- SHA1 082bf0d094046c1af54412083f036f75dd3e0db1
- SHA512 0f142e4b3e639ca2c9b74c6817a968833b49e0ef40c142e111c83e5b85a6be5eb39ef363a4e2801020c67f3d7343b888acdb2048ff3bd8dfc5709b7b2f730904
- SSDEEP 12288:sSvO2x9mONvKRILSFnOkx2LIax5FAQjU/Liw:fvO2xJKRI2FOkx2LFicUV
- TLSH T10DD44A31E241C03AD4A74576C6FA0BAFE5647D25531165CBA3C43A2A2FB36D2BE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-15_81b9c7fe356715c486d36a96f1ecb304_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-15_81b9c7fe356715c486d36a96f1ecb304_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-15_81b9c7fe356715c486d36a96f1ecb304_amadey_coinminer_elex_smoke-loader_stop
- Size 615KB
- SHA256 b78ea25f9c047a479d4704c9b3d301e6b1c98b224e2afe8b0d5cd556f9e876c9
- MD5 81b9c7fe356715c486d36a96f1ecb304
- SHA1 082bf0d094046c1af54412083f036f75dd3e0db1
- SHA512 0f142e4b3e639ca2c9b74c6817a968833b49e0ef40c142e111c83e5b85a6be5eb39ef363a4e2801020c67f3d7343b888acdb2048ff3bd8dfc5709b7b2f730904
- SSDEEP 12288:sSvO2x9mONvKRILSFnOkx2LIax5FAQjU/Liw:fvO2xJKRI2FOkx2LFicUV
- TLSH T10DD44A31E241C03AD4A74576C6FA0BAFE5647D25531165CBA3C43A2A2FB36D2BE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory