General
- Target 2026-08-18_e035c1a987d94bb3c84116b6d8642ad3_amadey_coinminer_elex_smoke-loader_stop
- Size 761KB
- Sample260818-fdgresw1ev
- SHA256 b9a714bea3c7b7430122fbca8a4311fe3ac48dcda10b8f3c88fff18728c629fe
- MD5 e035c1a987d94bb3c84116b6d8642ad3
- SHA1 ab4ac01675dd6a4b119f54ac7bad2b0b443eaa82
- SHA512 0fe678780f8433b246fd963bde18c93d6aa54538a5286788da14c0230d68ea465625a2f548c7484e1b6c9cb8db723a21bd1cefe06fd1b89fd160984d1efc0ac8
- SSDEEP 12288:5SvO2x9mONvKRwLSFtsOkxHya5hYIW0p98B:AvO2xJKRw2kOkxSkW298B
- TLSH T142F49E35A2808036C0B34532C6F94AABF9797D35631565CBA3843B662F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-18_e035c1a987d94bb3c84116b6d8642ad3_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-18_e035c1a987d94bb3c84116b6d8642ad3_amadey_coinminer_elex_smoke-loader_stop
- Size 761KB
- SHA256 b9a714bea3c7b7430122fbca8a4311fe3ac48dcda10b8f3c88fff18728c629fe
- MD5 e035c1a987d94bb3c84116b6d8642ad3
- SHA1 ab4ac01675dd6a4b119f54ac7bad2b0b443eaa82
- SHA512 0fe678780f8433b246fd963bde18c93d6aa54538a5286788da14c0230d68ea465625a2f548c7484e1b6c9cb8db723a21bd1cefe06fd1b89fd160984d1efc0ac8
- SSDEEP 12288:5SvO2x9mONvKRwLSFtsOkxHya5hYIW0p98B:AvO2xJKRw2kOkxSkW298B
- TLSH T142F49E35A2808036C0B34532C6F94AABF9797D35631565CBA3843B662F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Custom signature
UPX dump on OEP (original entry point)
Executes dropped EXE
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
Drops file in System32 directory