General
- Target 2026-08-25_65f303ccb3608ba077dca33e68b75e0c_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- Sample260826-222mdscj2w
- SHA256 bc0847398fe1fb74aca43a3f338ffcabdd588a7c328430713360f17ee6897c31
- MD5 65f303ccb3608ba077dca33e68b75e0c
- SHA1 117c81dbab7a214cd385d731f6fd103b79af3774
- SHA512 6b2e83f30a08e6d83792369db0b2d2cd7e4f74833a86593421bbac489d31b6c37efd4ec5970cf7dc2019f7b5f970246c032d0c681631194f4c19f7e7fbd8d81e
- SSDEEP 6144:ucTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:uSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T1A5D45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-25_65f303ccb3608ba077dca33e68b75e0c_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-25_65f303ccb3608ba077dca33e68b75e0c_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- SHA256 bc0847398fe1fb74aca43a3f338ffcabdd588a7c328430713360f17ee6897c31
- MD5 65f303ccb3608ba077dca33e68b75e0c
- SHA1 117c81dbab7a214cd385d731f6fd103b79af3774
- SHA512 6b2e83f30a08e6d83792369db0b2d2cd7e4f74833a86593421bbac489d31b6c37efd4ec5970cf7dc2019f7b5f970246c032d0c681631194f4c19f7e7fbd8d81e
- SSDEEP 6144:ucTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:uSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T1A5D45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory