General
- Target 2026-08-18_ad791cc03f939094db4c69e7e5ee1f33_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- Sample260818-cdbnmacn3w
- SHA256 2b25f06f8e9f8fef5353652eadc2370a99c981d11e4dc89c3d8ac8ee15025e2e
- MD5 ad791cc03f939094db4c69e7e5ee1f33
- SHA1 c4e72205889d430fac0464c415255c6bda961e28
- SHA512 d9b8275ec9b8723d7e009c2710fc1cd989c9229ef15f883be86231b471f866e22dc385cfce239b90579ccff3eb46aba2c91a324bf3b7eb99e3f7cebaf555f546
- SSDEEP 6144:vUJJuV1cdhIoA7vJ0CLoCgvDLe4AmFvirGcEOkCybEaQRuy8K:vYsVOdhElvkCgvDLe4usOkxHy
- TLSH T14DC48D29B6D0C036C5B39574C4A186BAEAB17432372549CFA3D5475A0F337E2BA7930E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-18_ad791cc03f939094db4c69e7e5ee1f33_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-18_ad791cc03f939094db4c69e7e5ee1f33_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- SHA256 2b25f06f8e9f8fef5353652eadc2370a99c981d11e4dc89c3d8ac8ee15025e2e
- MD5 ad791cc03f939094db4c69e7e5ee1f33
- SHA1 c4e72205889d430fac0464c415255c6bda961e28
- SHA512 d9b8275ec9b8723d7e009c2710fc1cd989c9229ef15f883be86231b471f866e22dc385cfce239b90579ccff3eb46aba2c91a324bf3b7eb99e3f7cebaf555f546
- SSDEEP 6144:vUJJuV1cdhIoA7vJ0CLoCgvDLe4AmFvirGcEOkCybEaQRuy8K:vYsVOdhElvkCgvDLe4usOkxHy
- TLSH T14DC48D29B6D0C036C5B39574C4A186BAEAB17432372549CFA3D5475A0F337E2BA7930E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Custom signature
UPX dump on OEP (original entry point)
Executes dropped EXE
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
Drops file in System32 directory