General
- Target 2026-08-24_8f8bbe0074d937aab583c573f1846c51_amadey_coinminer_elex_smoke-loader_stop
- Size 576KB
- Sample260825-jkx9jaybmh
- SHA256 d8878a2da787c9ed30ed0ffae0f1336c1d6448a0bd8a60fcf6f30de45a350196
- MD5 8f8bbe0074d937aab583c573f1846c51
- SHA1 68338d52843ed514551defac48b6530b089e9fce
- SHA512 5f625b8d388106aa78f0a31aecc368bf2b0cd972bcf7de159db4f2524bdf2737acbc03483af9a0ceb2322dadd86a925cf4e6f9e79227c65047ab948b72be7941
- SSDEEP 6144:tcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K/:tSvO2x9mONvKRwLSFtsOkx2LIa+yx
- TLSH T145C46D26B6908072C4779578C4A257AAFBB1BC2127204ACFA390775A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-24_8f8bbe0074d937aab583c573f1846c51_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-24_8f8bbe0074d937aab583c573f1846c51_amadey_coinminer_elex_smoke-loader_stop
- Size 576KB
- SHA256 d8878a2da787c9ed30ed0ffae0f1336c1d6448a0bd8a60fcf6f30de45a350196
- MD5 8f8bbe0074d937aab583c573f1846c51
- SHA1 68338d52843ed514551defac48b6530b089e9fce
- SHA512 5f625b8d388106aa78f0a31aecc368bf2b0cd972bcf7de159db4f2524bdf2737acbc03483af9a0ceb2322dadd86a925cf4e6f9e79227c65047ab948b72be7941
- SSDEEP 6144:tcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K/:tSvO2x9mONvKRwLSFtsOkx2LIa+yx
- TLSH T145C46D26B6908072C4779578C4A257AAFBB1BC2127204ACFA390775A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory