General
- Target 2026-08-18_213dd55f634b567ac595d5a8a75d2843_amadey_coinminer_elex_smoke-loader_stop
- Size 761KB
- Sample260818-ft6eqaxvay
- SHA256 97135a25bf4948cfdc33d3c70261ad6363a05b812f268389d7ba6f9cf7211d04
- MD5 213dd55f634b567ac595d5a8a75d2843
- SHA1 3568cb49ba686711f7826aeb79e5f81fde2156d4
- SHA512 17dd207f3f1feed0eccd9d2c2348def65f034639cfa1c5626f945957d7d2f900c722797640b87fc2c81e1fcc9fe45e6100fa2c9d7a3bbc720d5904a3dc277860
- SSDEEP 12288:HSvO2x9mONvKRwLSFtsOkxHya5hYIW0p98B:yvO2xJKRw2kOkxSkW298B
- TLSH T18EF49E35A2808036C0B34532C6F94AABF9797D35631565CBA3843B662F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-18_213dd55f634b567ac595d5a8a75d2843_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-18_213dd55f634b567ac595d5a8a75d2843_amadey_coinminer_elex_smoke-loader_stop
- Size 761KB
- SHA256 97135a25bf4948cfdc33d3c70261ad6363a05b812f268389d7ba6f9cf7211d04
- MD5 213dd55f634b567ac595d5a8a75d2843
- SHA1 3568cb49ba686711f7826aeb79e5f81fde2156d4
- SHA512 17dd207f3f1feed0eccd9d2c2348def65f034639cfa1c5626f945957d7d2f900c722797640b87fc2c81e1fcc9fe45e6100fa2c9d7a3bbc720d5904a3dc277860
- SSDEEP 12288:HSvO2x9mONvKRwLSFtsOkxHya5hYIW0p98B:yvO2xJKRw2kOkxSkW298B
- TLSH T18EF49E35A2808036C0B34532C6F94AABF9797D35631565CBA3843B662F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory