General
- Target 2026-08-24_cfb62dbab77a6b9a03ed612ad16ef80b_amadey_coinminer_elex_smoke-loader_stop
- Size 576KB
- Sample260825-ax2caavhna
- SHA256 1ac9ab7af4ceac1cb616be05146987bd16f85d4361551ef471e5d607f6eca993
- MD5 cfb62dbab77a6b9a03ed612ad16ef80b
- SHA1 dddfde56bd2d337ee611eac1dfca7e0127099f49
- SHA512 7454536f2295399318a0de059b99da32c593d8662bbd7e83ae24cd0ed3d85c1288c4017a1c0b461fc68569971296a1b0ba97a333edca47ea0e8a15bd800afcfb
- SSDEEP 6144:ocTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K/:oSvO2x9mONvKRwLSFtsOkx2LIa+yx
- TLSH T1A9C46D26B6908072C4779578C4A257AAFBB1BC2127204ACFA390775A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-24_cfb62dbab77a6b9a03ed612ad16ef80b_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-24_cfb62dbab77a6b9a03ed612ad16ef80b_amadey_coinminer_elex_smoke-loader_stop
- Size 576KB
- SHA256 1ac9ab7af4ceac1cb616be05146987bd16f85d4361551ef471e5d607f6eca993
- MD5 cfb62dbab77a6b9a03ed612ad16ef80b
- SHA1 dddfde56bd2d337ee611eac1dfca7e0127099f49
- SHA512 7454536f2295399318a0de059b99da32c593d8662bbd7e83ae24cd0ed3d85c1288c4017a1c0b461fc68569971296a1b0ba97a333edca47ea0e8a15bd800afcfb
- SSDEEP 6144:ocTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K/:oSvO2x9mONvKRwLSFtsOkx2LIa+yx
- TLSH T1A9C46D26B6908072C4779578C4A257AAFBB1BC2127204ACFA390775A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory