General
- Target 2026-08-20_74b35fdf20c2928aeea727a7b9d04217_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- Sample260820-ebn72sbc52
- SHA256 f0ffac4ab32daa2e1e5075c939aabe5f7eb92e44759cee03a03ff9faa792bc7e
- MD5 74b35fdf20c2928aeea727a7b9d04217
- SHA1 de6631422bd38155eab37c49c0d718bd7bd81d2f
- SHA512 2b0d7aba3e82783aa9cc0a39e95f25240d4d3146444ca08a4e9a206da36dc0bd3a8c53e091008635027cb9442c912475d3226641ca5d63310c92dae0eb0e1566
- SSDEEP 6144:9cTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:9SvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T1E7D45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-20_74b35fdf20c2928aeea727a7b9d04217_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_74b35fdf20c2928aeea727a7b9d04217_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- SHA256 f0ffac4ab32daa2e1e5075c939aabe5f7eb92e44759cee03a03ff9faa792bc7e
- MD5 74b35fdf20c2928aeea727a7b9d04217
- SHA1 de6631422bd38155eab37c49c0d718bd7bd81d2f
- SHA512 2b0d7aba3e82783aa9cc0a39e95f25240d4d3146444ca08a4e9a206da36dc0bd3a8c53e091008635027cb9442c912475d3226641ca5d63310c92dae0eb0e1566
- SSDEEP 6144:9cTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:9SvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T1E7D45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory