General
- Target 2026-08-15_15607b892245bedb327b1496c2691ad7_amadey_coinminer_elex_smoke-loader_stop
- Size 576KB
- Sample260815-g11cqagj3w
- SHA256 b1f8166426caddc34ad62d1b18617ba8aaac5b3f13b13968f32c1f29fba3061a
- MD5 15607b892245bedb327b1496c2691ad7
- SHA1 88d2e423db9fd584eaca3ac6a30a8fd3b0aaa9a9
- SHA512 879af81607cabe1ff8f133d045b9d09f3c912b004e68aa74e64d80a2ea5d98cd9fada34f06ec22c7c78c5773f165e465901db6ce7ffbf0425b4ebe8e80db4779
- SSDEEP 6144:2cTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K/:2SvO2x9mONvKRwLSFtsOkx2LIa+yx
- TLSH T16EC46D26B6908072C4779578C4A257AAFBB1BC2127204ACFA390775A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-15_15607b892245bedb327b1496c2691ad7_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-15_15607b892245bedb327b1496c2691ad7_amadey_coinminer_elex_smoke-loader_stop
- Size 576KB
- SHA256 b1f8166426caddc34ad62d1b18617ba8aaac5b3f13b13968f32c1f29fba3061a
- MD5 15607b892245bedb327b1496c2691ad7
- SHA1 88d2e423db9fd584eaca3ac6a30a8fd3b0aaa9a9
- SHA512 879af81607cabe1ff8f133d045b9d09f3c912b004e68aa74e64d80a2ea5d98cd9fada34f06ec22c7c78c5773f165e465901db6ce7ffbf0425b4ebe8e80db4779
- SSDEEP 6144:2cTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K/:2SvO2x9mONvKRwLSFtsOkx2LIa+yx
- TLSH T16EC46D26B6908072C4779578C4A257AAFBB1BC2127204ACFA390775A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory