General
- Target 2026-08-20_76ac364a3d904aa804ce0acf9af0a955_amadey_coinminer_elex_smoke-loader_stop
- Size 766KB
- Sample260820-ezgswaem71
- SHA256 60306db4ec97140d38a77177a7b1d203bf39431b58fb6ab9b5b1c45bdfbe5e02
- MD5 76ac364a3d904aa804ce0acf9af0a955
- SHA1 23c27cfd6fa3dd177ac5e2a1a8ce8eddeec1365c
- SHA512 93298f4176416dac4ba72d24aeec9e0de2416132503c8238480cd76ac2daa12ebf94f2ed8e00121b01a2e931e4bf3e999abb34486397c366816ee262dbb686e1
- SSDEEP 12288:eSvO2x9mONvKRwLSFtsOkx2LIa+ya5FAQjU/Liw:dvO2xJKRw2kOkx2LFRvcUV
- TLSH T172F45A31E241C03AD0A74576C6FA0BAFE564BD25531155CBA3C43A6A2FB36D2BE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-20_76ac364a3d904aa804ce0acf9af0a955_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_76ac364a3d904aa804ce0acf9af0a955_amadey_coinminer_elex_smoke-loader_stop
- Size 766KB
- SHA256 60306db4ec97140d38a77177a7b1d203bf39431b58fb6ab9b5b1c45bdfbe5e02
- MD5 76ac364a3d904aa804ce0acf9af0a955
- SHA1 23c27cfd6fa3dd177ac5e2a1a8ce8eddeec1365c
- SHA512 93298f4176416dac4ba72d24aeec9e0de2416132503c8238480cd76ac2daa12ebf94f2ed8e00121b01a2e931e4bf3e999abb34486397c366816ee262dbb686e1
- SSDEEP 12288:eSvO2x9mONvKRwLSFtsOkx2LIa+ya5FAQjU/Liw:dvO2xJKRw2kOkx2LFRvcUV
- TLSH T172F45A31E241C03AD0A74576C6FA0BAFE564BD25531155CBA3C43A6A2FB36D2BE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory