General
- Target 2026-08-16_d5b2bfc70d807e7ec5eabc86712d1467_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- Sample260816-lrqjdavcpe
- SHA256 008b1fa95520bcdead666242e121abd5f92d73cdd0d64566c38883da9529a2a6
- MD5 d5b2bfc70d807e7ec5eabc86712d1467
- SHA1 bed5a763f35a83c848781cfe0fa3a1b831830b0a
- SHA512 2772aecc6aec7f343dad999a8ed61f29d0bdda6bf87be5c45c1c4ee5613216485caff609096d3a49c07fcea4f5cdcfd324a4a233c2434507b6c0e995f6120530
- SSDEEP 6144:fcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:fSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T130D45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-16_d5b2bfc70d807e7ec5eabc86712d1467_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_d5b2bfc70d807e7ec5eabc86712d1467_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- SHA256 008b1fa95520bcdead666242e121abd5f92d73cdd0d64566c38883da9529a2a6
- MD5 d5b2bfc70d807e7ec5eabc86712d1467
- SHA1 bed5a763f35a83c848781cfe0fa3a1b831830b0a
- SHA512 2772aecc6aec7f343dad999a8ed61f29d0bdda6bf87be5c45c1c4ee5613216485caff609096d3a49c07fcea4f5cdcfd324a4a233c2434507b6c0e995f6120530
- SSDEEP 6144:fcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:fSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T130D45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory