General
- Target 2026-08-19_5e111bfcef811444aa13950c3437464d_amadey_coinminer_elex_smoke-loader_stop
- Size 761KB
- Sample260819-kbld2sssh1
- SHA256 cbea7022f1d15661365796ad5da58e9025b7dd423f085aecb1a691febc89cebf
- MD5 5e111bfcef811444aa13950c3437464d
- SHA1 a4d7557d72de38452f2da75b320bfe57a971586f
- SHA512 8602bad4d2e9f7010848f92ae58e6edfb847b6e38994d37df0ae7d9f035f643a31af7a41253edc1f56810c365fa0c594b5573b63d8f16bd0aadf180cfbf94a6a
- SSDEEP 12288:+SvO2x9mONvKRwLSFtsOkxHya5hYIW0p98B:9vO2xJKRw2kOkxSkW298B
- TLSH T128F49E35A2808036C0B34532C6F94AABF9797D35631565CBA3843B662F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-19_5e111bfcef811444aa13950c3437464d_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_5e111bfcef811444aa13950c3437464d_amadey_coinminer_elex_smoke-loader_stop
- Size 761KB
- SHA256 cbea7022f1d15661365796ad5da58e9025b7dd423f085aecb1a691febc89cebf
- MD5 5e111bfcef811444aa13950c3437464d
- SHA1 a4d7557d72de38452f2da75b320bfe57a971586f
- SHA512 8602bad4d2e9f7010848f92ae58e6edfb847b6e38994d37df0ae7d9f035f643a31af7a41253edc1f56810c365fa0c594b5573b63d8f16bd0aadf180cfbf94a6a
- SSDEEP 12288:+SvO2x9mONvKRwLSFtsOkxHya5hYIW0p98B:9vO2xJKRw2kOkxSkW298B
- TLSH T128F49E35A2808036C0B34532C6F94AABF9797D35631565CBA3843B662F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory