General
- Target 2026-08-21_d620b692f81dea5b25d235c32099b8c1_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- Sample260822-flqpas1dkb
- SHA256 2ef2aa820907e0cf30819d3f4401e06622cd9d88b3e0fdaeb2d7807c22bfca3b
- MD5 d620b692f81dea5b25d235c32099b8c1
- SHA1 ea46ee896b6186ec2b3b9fabfd1283ab56f52f7b
- SHA512 42e80b4b239759fd7d67f1532569ce8e83fbfb135dcf0e2362909a75bea8c493f2cd6ec40dc29ab573afb519e1e6e1f8f25245b800b1e47d2ba0c37c6ca58b39
- SSDEEP 6144:RWVrC1c2oonALgPLj7vf1LKlyIFVirGcEOkCybEaQRuy8K:RkCO2zVPX7vf1LKlIsOkxHy
- TLSH T1ECC47C29B690D076C4779574C4A187AAFAB1B432372449CFB3D00B5A1F237E2BA7530E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-21_d620b692f81dea5b25d235c32099b8c1_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_d620b692f81dea5b25d235c32099b8c1_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- SHA256 2ef2aa820907e0cf30819d3f4401e06622cd9d88b3e0fdaeb2d7807c22bfca3b
- MD5 d620b692f81dea5b25d235c32099b8c1
- SHA1 ea46ee896b6186ec2b3b9fabfd1283ab56f52f7b
- SHA512 42e80b4b239759fd7d67f1532569ce8e83fbfb135dcf0e2362909a75bea8c493f2cd6ec40dc29ab573afb519e1e6e1f8f25245b800b1e47d2ba0c37c6ca58b39
- SSDEEP 6144:RWVrC1c2oonALgPLj7vf1LKlyIFVirGcEOkCybEaQRuy8K:RkCO2zVPX7vf1LKlIsOkxHy
- TLSH T1ECC47C29B690D076C4779574C4A187AAFAB1B432372449CFB3D00B5A1F237E2BA7530E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory