General
- Target 2026-08-24_5621e40473a1a3ddb02d2d4d9d5a7b0f_amadey_coinminer_elex_smoke-loader_stop
- Size 766KB
- Sample260825-qblmpsyyfs
- SHA256 2f8b9135bd266f529cbe95c27fb41cf3becb4a238e818d24f6229cda027256d1
- MD5 5621e40473a1a3ddb02d2d4d9d5a7b0f
- SHA1 47ce65ae69dd3e8362ceeb9b3f0089f61aec385b
- SHA512 ed2166e2b210486ae764eea6a7894f39872c6d9b66137c5fb93333ecc03a5093af5d1c118083f1d832afcc9bc40841a3d8b7f2cadd8f77f9d6dd4c619d70401c
- SSDEEP 12288:rSvO2x9mONvKRwLSFtsOkx2LIa+ya5FAQjU/Liw:evO2xJKRw2kOkx2LFRvcUV
- TLSH T132F45A31E241C03AD0A74576C6FA0BAFE564BD25531155CBA3C43A6A2FB36D2BE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-24_5621e40473a1a3ddb02d2d4d9d5a7b0f_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-24_5621e40473a1a3ddb02d2d4d9d5a7b0f_amadey_coinminer_elex_smoke-loader_stop
- Size 766KB
- SHA256 2f8b9135bd266f529cbe95c27fb41cf3becb4a238e818d24f6229cda027256d1
- MD5 5621e40473a1a3ddb02d2d4d9d5a7b0f
- SHA1 47ce65ae69dd3e8362ceeb9b3f0089f61aec385b
- SHA512 ed2166e2b210486ae764eea6a7894f39872c6d9b66137c5fb93333ecc03a5093af5d1c118083f1d832afcc9bc40841a3d8b7f2cadd8f77f9d6dd4c619d70401c
- SSDEEP 12288:rSvO2x9mONvKRwLSFtsOkx2LIa+ya5FAQjU/Liw:evO2xJKRw2kOkx2LFRvcUV
- TLSH T132F45A31E241C03AD0A74576C6FA0BAFE564BD25531155CBA3C43A6A2FB36D2BE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory