General
- Target 2026-08-17_95c43f467de8055f1fbec34cc2d9a82c_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- Sample260817-w9yb2sxalg
- SHA256 0258a384bc250fe69ef06d3b5ef9dbd45587741634819f700e0231b5cb34b010
- MD5 95c43f467de8055f1fbec34cc2d9a82c
- SHA1 73857593d9060890874f49aec068fdacf8adc9d5
- SHA512 776b17e5084d30c7e2f4421597d5fe5ff53b3770df0b310d24f64f0423ca23d0e753a2643498aabbf6d8f455bb1300ba35fa704de2409c61f86d65e67725392d
- SSDEEP 6144:9cTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:9SvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T122D45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-17_95c43f467de8055f1fbec34cc2d9a82c_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-17_95c43f467de8055f1fbec34cc2d9a82c_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-17_95c43f467de8055f1fbec34cc2d9a82c_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- SHA256 0258a384bc250fe69ef06d3b5ef9dbd45587741634819f700e0231b5cb34b010
- MD5 95c43f467de8055f1fbec34cc2d9a82c
- SHA1 73857593d9060890874f49aec068fdacf8adc9d5
- SHA512 776b17e5084d30c7e2f4421597d5fe5ff53b3770df0b310d24f64f0423ca23d0e753a2643498aabbf6d8f455bb1300ba35fa704de2409c61f86d65e67725392d
- SSDEEP 6144:9cTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:9SvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T122D45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory