General
- Target 2026-08-22_9d3dc35f7b9b8234cd7a2ce77dc6c8d5_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- Sample260823-ehrazsxthv
- SHA256 92e95c44e84e9413811069b37bb1adfaefb0c4eeb123661519eb1d71a20ec7e0
- MD5 9d3dc35f7b9b8234cd7a2ce77dc6c8d5
- SHA1 054cdeb1416d9e784cf24d0f1d915cd333f861cb
- SHA512 505cff865aecf7774e6613d86f386192dadc465906113ba7f1b29aca4d6b584ae2acbed5bc1878900231fff937a6c4c90cae5454d759dd9179c08b0a63362941
- SSDEEP 6144:76UE71cqQEoMr5C2iKLJChYSvL+8xPFxirGcEOkCybEaQRXr9HNdvOa+y8K:7O7OqQs42iKFChYSvL+8AsOkx2LIa+y
- TLSH T142C46C26B6A0D076C4B79574C4A28BA6FFB1742227244BCFA39047561F637E2BE3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-22_9d3dc35f7b9b8234cd7a2ce77dc6c8d5_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-22_9d3dc35f7b9b8234cd7a2ce77dc6c8d5_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-22_9d3dc35f7b9b8234cd7a2ce77dc6c8d5_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- SHA256 92e95c44e84e9413811069b37bb1adfaefb0c4eeb123661519eb1d71a20ec7e0
- MD5 9d3dc35f7b9b8234cd7a2ce77dc6c8d5
- SHA1 054cdeb1416d9e784cf24d0f1d915cd333f861cb
- SHA512 505cff865aecf7774e6613d86f386192dadc465906113ba7f1b29aca4d6b584ae2acbed5bc1878900231fff937a6c4c90cae5454d759dd9179c08b0a63362941
- SSDEEP 6144:76UE71cqQEoMr5C2iKLJChYSvL+8xPFxirGcEOkCybEaQRXr9HNdvOa+y8K:7O7OqQs42iKFChYSvL+8AsOkx2LIa+y
- TLSH T142C46C26B6A0D076C4B79574C4A28BA6FFB1742227244BCFA39047561F637E2BE3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory