General
- Target 2026-08-17_4352b670c78de4acf93230520f72577d_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- Sample260817-2a9tpaea66
- SHA256 afd646bf9e6c6a64a9d47eae2af64d3ef9619a353cdb5ed55d4bcd56f073c042
- MD5 4352b670c78de4acf93230520f72577d
- SHA1 7d9d58999541acf8951a589b347255dbcbe44cde
- SHA512 28cd3593a5e569ded98f275b0033c94f2a11ac264a4e5c9131c86a54d38942e9460468d995a9f06b4cfcb82b772aca1c05decbf10eaa4b42fdb66fd27739f2a3
- SSDEEP 6144:74ZaN1cb90oOTFmIFLq0cvnXhLCqj2EFNirGcEOkCybEaQRuy8K:7rNOb9+sIF+0cvnXhLCqEsOkxHy
- TLSH T11BC48D29B6E0C076C4B79578C4A186B6FAB17832372459CFA394075A1F337E2BA3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-17_4352b670c78de4acf93230520f72577d_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-17_4352b670c78de4acf93230520f72577d_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- SHA256 afd646bf9e6c6a64a9d47eae2af64d3ef9619a353cdb5ed55d4bcd56f073c042
- MD5 4352b670c78de4acf93230520f72577d
- SHA1 7d9d58999541acf8951a589b347255dbcbe44cde
- SHA512 28cd3593a5e569ded98f275b0033c94f2a11ac264a4e5c9131c86a54d38942e9460468d995a9f06b4cfcb82b772aca1c05decbf10eaa4b42fdb66fd27739f2a3
- SSDEEP 6144:74ZaN1cb90oOTFmIFLq0cvnXhLCqj2EFNirGcEOkCybEaQRuy8K:7rNOb9+sIF+0cvnXhLCqEsOkxHy
- TLSH T11BC48D29B6E0C076C4B79578C4A186B6FAB17832372459CFA394075A1F337E2BA3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory