General
- Target 2026-08-24_6138465b15968bf2ac7098b1d78af276_amadey_coinminer_elex_smoke-loader_stop
- Size 761KB
- Sample260825-n9wt8a1gnh
- SHA256 a30d4d3cba3a376dfc928026b110a8b6c966480651ff644b22ba9791d6366642
- MD5 6138465b15968bf2ac7098b1d78af276
- SHA1 55d349fe299a54e149c56357fcfb23567395fc04
- SHA512 e21b36294fa6da88722f3214953cc76e7897ba2f9baf70b6695ba8cb6700868c177db79951bca8b4962b6f7dc03e7ce9d51351a5fac7649fcfdcc17b6911f677
- SSDEEP 12288:lSvO2x9mONvKRwLSFtsOkxHya5hYIW0p98B:EvO2xJKRw2kOkxSkW298B
- TLSH T17DF49E35A2808036C0B34532C6F94AABF9797D35631565CBA3843B662F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-24_6138465b15968bf2ac7098b1d78af276_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-24_6138465b15968bf2ac7098b1d78af276_amadey_coinminer_elex_smoke-loader_stop
- Size 761KB
- SHA256 a30d4d3cba3a376dfc928026b110a8b6c966480651ff644b22ba9791d6366642
- MD5 6138465b15968bf2ac7098b1d78af276
- SHA1 55d349fe299a54e149c56357fcfb23567395fc04
- SHA512 e21b36294fa6da88722f3214953cc76e7897ba2f9baf70b6695ba8cb6700868c177db79951bca8b4962b6f7dc03e7ce9d51351a5fac7649fcfdcc17b6911f677
- SSDEEP 12288:lSvO2x9mONvKRwLSFtsOkxHya5hYIW0p98B:EvO2xJKRw2kOkxSkW298B
- TLSH T17DF49E35A2808036C0B34532C6F94AABF9797D35631565CBA3843B662F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory