General
- Target 2026-08-20_8644ee646a3a3f4b07739025c2d61234_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- Sample260820-lw3dqshr41
- SHA256 09cfe11f095dda8317152d494e19c7e325ef6923a0cdde47e725ad3ecf21e9b1
- MD5 8644ee646a3a3f4b07739025c2d61234
- SHA1 70bd91728b7519a2e84edc54810be0febddfb736
- SHA512 c9636cfe65611425aada6c4e08b5f36944f9fe8aa635305f68833acda0486088420e8856d7b471cf0e6679096aaf03ecac381d99c18b6c36e2d1f18ef8ff6d50
- SSDEEP 6144:VcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:VSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T11CD45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-20_8644ee646a3a3f4b07739025c2d61234_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_8644ee646a3a3f4b07739025c2d61234_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win11ltsc2024-20260710-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_8644ee646a3a3f4b07739025c2d61234_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- SHA256 09cfe11f095dda8317152d494e19c7e325ef6923a0cdde47e725ad3ecf21e9b1
- MD5 8644ee646a3a3f4b07739025c2d61234
- SHA1 70bd91728b7519a2e84edc54810be0febddfb736
- SHA512 c9636cfe65611425aada6c4e08b5f36944f9fe8aa635305f68833acda0486088420e8856d7b471cf0e6679096aaf03ecac381d99c18b6c36e2d1f18ef8ff6d50
- SSDEEP 6144:VcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:VSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T11CD45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory