General
- Target 2026-08-23_8d30ea3d29d69ec87c5bf0afe70c3dfe_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- Sample260824-gsrevatbrh
- SHA256 091e03ee2d1eedbbab8db443798602f1572d3b5e136e0e5714f09f0ca0f90df0
- MD5 8d30ea3d29d69ec87c5bf0afe70c3dfe
- SHA1 4ed07772954ddc5bfa0c035c09046593cabea697
- SHA512 c81cfc85f71af8b127ece44ae94e14177a23e4cfe58acd105aed186f7551e69a33b46c09d3de61883d631e651be73c32c740ad18368d2372d3ced379e3a5f719
- SSDEEP 6144:A4ZaN1cb90oOTFmIFLq0cvnXhLCqj2EFNirGcEOkCybEaQRuy8K:ArNOb9+sIF+0cvnXhLCqEsOkxHy
- TLSH T189C48D29B6E0C076C4B79578C4A186B6FAB17832372459CFA394075A1F337E2BA3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-23_8d30ea3d29d69ec87c5bf0afe70c3dfe_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-23_8d30ea3d29d69ec87c5bf0afe70c3dfe_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- SHA256 091e03ee2d1eedbbab8db443798602f1572d3b5e136e0e5714f09f0ca0f90df0
- MD5 8d30ea3d29d69ec87c5bf0afe70c3dfe
- SHA1 4ed07772954ddc5bfa0c035c09046593cabea697
- SHA512 c81cfc85f71af8b127ece44ae94e14177a23e4cfe58acd105aed186f7551e69a33b46c09d3de61883d631e651be73c32c740ad18368d2372d3ced379e3a5f719
- SSDEEP 6144:A4ZaN1cb90oOTFmIFLq0cvnXhLCqj2EFNirGcEOkCybEaQRuy8K:ArNOb9+sIF+0cvnXhLCqEsOkxHy
- TLSH T189C48D29B6E0C076C4B79578C4A186B6FAB17832372459CFA394075A1F337E2BA3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Custom signature
UPX dump on OEP (original entry point)
Executes dropped EXE
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
Drops file in System32 directory