General
- Target 2026-08-23_18300bd8d93562eea8cececaaf28925f_amadey_coinminer_elex_smoke-loader_stop
- Size 511KB
- Sample260824-t1e31aeb89
- SHA256 528146eca29225e8a7b4e05e8757c52762758434f9e29e25a7ffacbddd499e81
- MD5 18300bd8d93562eea8cececaaf28925f
- SHA1 82d2a07fcae50c7b84ddb3170e30d523f4d7f485
- SHA512 5dc8b1c738c6ef531ac267d4a7a8c3b122e107d89288f83b026e80f4677b9bf7b93bbafee73a5eb2a6c030c3a07b632a7475cb00d7d053d3c2a1bd6b36b93147
- SSDEEP 6144:wcTgav1cdCTuoPbgwmOLJvKRILSFvdFDcEOkCybEaQRXr9HNdvOax5Rv0:wSvO2x9mONvKRILSFnOkx2LIax5F0
- TLSH T184B45C26F6908036C4B34575C5F64BAAFAB4BC21631156CBA3943A6A1F737D2BD3130E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-23_18300bd8d93562eea8cececaaf28925f_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-23_18300bd8d93562eea8cececaaf28925f_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-23_18300bd8d93562eea8cececaaf28925f_amadey_coinminer_elex_smoke-loader_stop
- Size 511KB
- SHA256 528146eca29225e8a7b4e05e8757c52762758434f9e29e25a7ffacbddd499e81
- MD5 18300bd8d93562eea8cececaaf28925f
- SHA1 82d2a07fcae50c7b84ddb3170e30d523f4d7f485
- SHA512 5dc8b1c738c6ef531ac267d4a7a8c3b122e107d89288f83b026e80f4677b9bf7b93bbafee73a5eb2a6c030c3a07b632a7475cb00d7d053d3c2a1bd6b36b93147
- SSDEEP 6144:wcTgav1cdCTuoPbgwmOLJvKRILSFvdFDcEOkCybEaQRXr9HNdvOax5Rv0:wSvO2x9mONvKRILSFnOkx2LIax5F0
- TLSH T184B45C26F6908036C4B34575C5F64BAAFAB4BC21631156CBA3943A6A1F737D2BD3130E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory