General
- Target 2026-08-17_4352b670c78de4acf93230520f72577d_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- Sample260817-2a9tpaea66
- SHA256 afd646bf9e6c6a64a9d47eae2af64d3ef9619a353cdb5ed55d4bcd56f073c042
- MD5 4352b670c78de4acf93230520f72577d
- SHA1 7d9d58999541acf8951a589b347255dbcbe44cde
- SHA512 28cd3593a5e569ded98f275b0033c94f2a11ac264a4e5c9131c86a54d38942e9460468d995a9f06b4cfcb82b772aca1c05decbf10eaa4b42fdb66fd27739f2a3
- SSDEEP 6144:74ZaN1cb90oOTFmIFLq0cvnXhLCqj2EFNirGcEOkCybEaQRuy8K:7rNOb9+sIF+0cvnXhLCqEsOkxHy
- TLSH T11BC48D29B6E0C076C4B79578C4A186B6FAB17832372459CFA394075A1F337E2BA3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-17_4352b670c78de4acf93230520f72577d_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-17_4352b670c78de4acf93230520f72577d_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- SHA256 afd646bf9e6c6a64a9d47eae2af64d3ef9619a353cdb5ed55d4bcd56f073c042
- MD5 4352b670c78de4acf93230520f72577d
- SHA1 7d9d58999541acf8951a589b347255dbcbe44cde
- SHA512 28cd3593a5e569ded98f275b0033c94f2a11ac264a4e5c9131c86a54d38942e9460468d995a9f06b4cfcb82b772aca1c05decbf10eaa4b42fdb66fd27739f2a3
- SSDEEP 6144:74ZaN1cb90oOTFmIFLq0cvnXhLCqj2EFNirGcEOkCybEaQRuy8K:7rNOb9+sIF+0cvnXhLCqEsOkxHy
- TLSH T11BC48D29B6E0C076C4B79578C4A186B6FAB17832372459CFA394075A1F337E2BA3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Custom signature
UPX dump on OEP (original entry point)
Executes dropped EXE
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
Drops file in System32 directory