General
- Target 2026-08-15_318cc4802070d4ce12f584828e74d44e_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- Sample260816-a35xnaae36
- SHA256 409a2cd3186525aca6ccac2432d5fd9ac15cdcc374e642a8860f82e41b7572b0
- MD5 318cc4802070d4ce12f584828e74d44e
- SHA1 949cf41054939174b66ad0bb08667b60c35e42c0
- SHA512 70b84a2ffa665918ec06a563698c238c8c37e06a95bc37c8b361b883829b16ede49f0f37e3a3aaf7679c8bc46146c36f8c12be792d624d452777bf9cb8116545
- SSDEEP 6144:WcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:WSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T176D45B35A6808036C0B74631C6F64BAAF9B5BC21631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-15_318cc4802070d4ce12f584828e74d44e_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-15_318cc4802070d4ce12f584828e74d44e_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- SHA256 409a2cd3186525aca6ccac2432d5fd9ac15cdcc374e642a8860f82e41b7572b0
- MD5 318cc4802070d4ce12f584828e74d44e
- SHA1 949cf41054939174b66ad0bb08667b60c35e42c0
- SHA512 70b84a2ffa665918ec06a563698c238c8c37e06a95bc37c8b361b883829b16ede49f0f37e3a3aaf7679c8bc46146c36f8c12be792d624d452777bf9cb8116545
- SSDEEP 6144:WcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:WSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T176D45B35A6808036C0B74631C6F64BAAF9B5BC21631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory