General
- Target 2026-08-20_f4b748b676c503bd121417acc743cb65_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- Sample260820-ex7lhszard
- SHA256 08626ae97369efff5cb2d51af66900c643b422ca1189b0429b8528e29227f53e
- MD5 f4b748b676c503bd121417acc743cb65
- SHA1 c6bd213c2acf67b50e2a1928193185fa55dbce15
- SHA512 051cea2f26fa98ed49e9b77deac388fc74d621d4cd7e5184eea84eaa6563093aafb82f63dddd233fe84807568bf936f53093ba259cb42d7d1d0eb19484647928
- SSDEEP 6144:YcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:YSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T1DCD45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-20_f4b748b676c503bd121417acc743cb65_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_f4b748b676c503bd121417acc743cb65_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- SHA256 08626ae97369efff5cb2d51af66900c643b422ca1189b0429b8528e29227f53e
- MD5 f4b748b676c503bd121417acc743cb65
- SHA1 c6bd213c2acf67b50e2a1928193185fa55dbce15
- SHA512 051cea2f26fa98ed49e9b77deac388fc74d621d4cd7e5184eea84eaa6563093aafb82f63dddd233fe84807568bf936f53093ba259cb42d7d1d0eb19484647928
- SSDEEP 6144:YcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:YSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T1DCD45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory