General
- Target 2026-08-16_fa9310ea244a660b2768d5d473cafcd6_amadey_coinminer_elex_smoke-loader_stop
- Size 525KB
- Sample260816-lcpnjacd68
- SHA256 a394bee2ecfb480717a4b46a9d67ded1cd8db211e046656986f2969d6063c828
- MD5 fa9310ea244a660b2768d5d473cafcd6
- SHA1 62b24739d729dd701533c98f3da5c054b9f3f8f8
- SHA512 84c9083168f75ea2249bd9f57c4bce4ba84d349bc5f6eed988f59432891bb96ae1f5c93a387c79d6933e1bbab4070572927ef1d4fddafbd94d5459238c8fcd24
- SSDEEP 6144:5cTgav1cdCTuoPbgwmOLJvKRhLSFXdFwirGcEOkCybEaQRXr9HNdvOaey8K:5SvO2x9mONvKRhLSFtsOkx2LIaey
- TLSH T1BFB47D2AB6A0D076C4779579C4A257BAFBB1742137204ACFA390475A1F237E2BE3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-16_fa9310ea244a660b2768d5d473cafcd6_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_fa9310ea244a660b2768d5d473cafcd6_amadey_coinminer_elex_smoke-loader_stop
- Size 525KB
- SHA256 a394bee2ecfb480717a4b46a9d67ded1cd8db211e046656986f2969d6063c828
- MD5 fa9310ea244a660b2768d5d473cafcd6
- SHA1 62b24739d729dd701533c98f3da5c054b9f3f8f8
- SHA512 84c9083168f75ea2249bd9f57c4bce4ba84d349bc5f6eed988f59432891bb96ae1f5c93a387c79d6933e1bbab4070572927ef1d4fddafbd94d5459238c8fcd24
- SSDEEP 6144:5cTgav1cdCTuoPbgwmOLJvKRhLSFXdFwirGcEOkCybEaQRXr9HNdvOaey8K:5SvO2x9mONvKRhLSFtsOkx2LIaey
- TLSH T1BFB47D2AB6A0D076C4779579C4A257BAFBB1742137204ACFA390475A1F237E2BE3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory