General
- Target 2026-08-20_62ea3b42c7fcf17f4a404e56c805be7d_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- Sample260820-dm549syeph
- SHA256 15401d30fca072414e32cfeede7126a0eb1fc47a1df1eba40d8e8333fdd18c01
- MD5 62ea3b42c7fcf17f4a404e56c805be7d
- SHA1 c73831d673ec3ce255d12f964f289c61a95aae04
- SHA512 a6a717b6eb5fe6264402ec2ce8c16f2d84d2e2efe6bee96067abc74d2239f72b2c0f2196918b2071364b3f765c1f9aab88a3713aea22b9df8e504bafcfcc3f22
- SSDEEP 6144:G6UE71cqQEoMr5C2iKLJChYSvL+8xPFxirGcEOkCybEaQRXr9HNdvOa+y8K:GO7OqQs42iKFChYSvL+8AsOkx2LIa+y
- TLSH T164C46C26B6A0D076C4B79574C4A28BA6FFB1742227244BCFA39047561F637E2BE3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-20_62ea3b42c7fcf17f4a404e56c805be7d_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_62ea3b42c7fcf17f4a404e56c805be7d_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- SHA256 15401d30fca072414e32cfeede7126a0eb1fc47a1df1eba40d8e8333fdd18c01
- MD5 62ea3b42c7fcf17f4a404e56c805be7d
- SHA1 c73831d673ec3ce255d12f964f289c61a95aae04
- SHA512 a6a717b6eb5fe6264402ec2ce8c16f2d84d2e2efe6bee96067abc74d2239f72b2c0f2196918b2071364b3f765c1f9aab88a3713aea22b9df8e504bafcfcc3f22
- SSDEEP 6144:G6UE71cqQEoMr5C2iKLJChYSvL+8xPFxirGcEOkCybEaQRXr9HNdvOa+y8K:GO7OqQs42iKFChYSvL+8AsOkx2LIa+y
- TLSH T164C46C26B6A0D076C4B79574C4A28BA6FFB1742227244BCFA39047561F637E2BE3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory