General
- Target 2026-08-15_76be3e7902840c88316e96c85fa2a488_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- Sample260815-zekz1styb1
- SHA256 3e5ee2a74035c4034e67fad197c101646f3a2ad4f0ab4cbf22b6b8354e7a337c
- MD5 76be3e7902840c88316e96c85fa2a488
- SHA1 ac8ff0833011a77b9c1e75f1ce019b20e9434049
- SHA512 5a0da8c3cc4d219849e0b5e27f4ad45bf59e831d1df3527d3d6cd7298afdb0b3190045b8b00d9bd7a576ae81b059c0810503d0804ffb252e3af4eaf372a34ee8
- SSDEEP 6144:ucTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:uSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T1BDD45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-15_76be3e7902840c88316e96c85fa2a488_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-15_76be3e7902840c88316e96c85fa2a488_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- SHA256 3e5ee2a74035c4034e67fad197c101646f3a2ad4f0ab4cbf22b6b8354e7a337c
- MD5 76be3e7902840c88316e96c85fa2a488
- SHA1 ac8ff0833011a77b9c1e75f1ce019b20e9434049
- SHA512 5a0da8c3cc4d219849e0b5e27f4ad45bf59e831d1df3527d3d6cd7298afdb0b3190045b8b00d9bd7a576ae81b059c0810503d0804ffb252e3af4eaf372a34ee8
- SSDEEP 6144:ucTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:uSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T1BDD45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory