General
- Target 2026-08-15_477f5e57eee1d5c6e3b8e51aabff72cd_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- Sample260815-ematssyzfy
- SHA256 caae094695b0fcea1a4a78a45c15fbd3ccbf8cc581fdd76fea68fe42c7366ca0
- MD5 477f5e57eee1d5c6e3b8e51aabff72cd
- SHA1 6504a37c5725905e97611b3a41daa7bd4bb52e70
- SHA512 b37eed4fcbde7b38aec6646bec2a5fc73e0b1f39949f7f31f5ca1b5a437af00978906f93d20d318b83795c378ddbe0322a7d2074fffab8e2d834acc7d6a73857
- SSDEEP 6144:UcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:USvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T142D45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-15_477f5e57eee1d5c6e3b8e51aabff72cd_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-15_477f5e57eee1d5c6e3b8e51aabff72cd_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- SHA256 caae094695b0fcea1a4a78a45c15fbd3ccbf8cc581fdd76fea68fe42c7366ca0
- MD5 477f5e57eee1d5c6e3b8e51aabff72cd
- SHA1 6504a37c5725905e97611b3a41daa7bd4bb52e70
- SHA512 b37eed4fcbde7b38aec6646bec2a5fc73e0b1f39949f7f31f5ca1b5a437af00978906f93d20d318b83795c378ddbe0322a7d2074fffab8e2d834acc7d6a73857
- SSDEEP 6144:UcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:USvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T142D45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory