General
- Target 2026-08-20_1a4a51641235ab85fb1f478b6108b49f_amadey_coinminer_elex_smoke-loader_stop
- Size 511KB
- Sample260820-mcqq9sal7t
- SHA256 d2f48a4e1ab7323c9b2e59ffc43039ca84589c908e348e1655e6a7ed69b0f23c
- MD5 1a4a51641235ab85fb1f478b6108b49f
- SHA1 45d9c5765dcfd17218192ce32e6752c306842fcc
- SHA512 6904bd9115ffa836b3892fcc5cd91d4d83f8d423ad8a1b126ec040250d6e2788e2b17e46be0379c03d68ea8faea39e80fb3060459fddff3b715216032ea9cb00
- SSDEEP 6144:OcTgav1cdCTuoPbgwmOLJvKRILSFvdFDcEOkCybEaQRXr9HNdvOax5Rv0:OSvO2x9mONvKRILSFnOkx2LIax5F0
- TLSH T16BB45C26F6908036C4B34575C5F64BAAFAB4BC21631156CBA3943A6A1F737D2BD3130E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-20_1a4a51641235ab85fb1f478b6108b49f_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_1a4a51641235ab85fb1f478b6108b49f_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_1a4a51641235ab85fb1f478b6108b49f_amadey_coinminer_elex_smoke-loader_stop
- Size 511KB
- SHA256 d2f48a4e1ab7323c9b2e59ffc43039ca84589c908e348e1655e6a7ed69b0f23c
- MD5 1a4a51641235ab85fb1f478b6108b49f
- SHA1 45d9c5765dcfd17218192ce32e6752c306842fcc
- SHA512 6904bd9115ffa836b3892fcc5cd91d4d83f8d423ad8a1b126ec040250d6e2788e2b17e46be0379c03d68ea8faea39e80fb3060459fddff3b715216032ea9cb00
- SSDEEP 6144:OcTgav1cdCTuoPbgwmOLJvKRILSFvdFDcEOkCybEaQRXr9HNdvOax5Rv0:OSvO2x9mONvKRILSFnOkx2LIax5F0
- TLSH T16BB45C26F6908036C4B34575C5F64BAAFAB4BC21631156CBA3943A6A1F737D2BD3130E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory