General
- Target 2026-08-25_f0d84fae2e523afc1771f9d34605f5c0_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- Sample260826-dcs2ysyses
- SHA256 24c46955cb0c9488a737bd112b922d1d78decfd07bbcf51af9fed898182ef296
- MD5 f0d84fae2e523afc1771f9d34605f5c0
- SHA1 7f2efa53ecae98572ee48718af25fb9d4e09bafe
- SHA512 4b8811efc08bbc59fd6e23d5a67264a194215d1ab9b11d9079d72f744ae5d19a69b4043441adf72830c36edeb61edae09280581b4754c72ea5df7b344dbcb3c1
- SSDEEP 6144:FWVrC1c2oonALgPLj7vf1LKlyIFVirGcEOkCybEaQRXr9HNdvOa+y8K:FkCO2zVPX7vf1LKlIsOkx2LIa+y
- TLSH T1ABC47C2AF6A0C036C4779574C4A257AAFFB1B42127204ACFA390475A1F637E2BE7531D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-25_f0d84fae2e523afc1771f9d34605f5c0_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-25_f0d84fae2e523afc1771f9d34605f5c0_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-25_f0d84fae2e523afc1771f9d34605f5c0_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- SHA256 24c46955cb0c9488a737bd112b922d1d78decfd07bbcf51af9fed898182ef296
- MD5 f0d84fae2e523afc1771f9d34605f5c0
- SHA1 7f2efa53ecae98572ee48718af25fb9d4e09bafe
- SHA512 4b8811efc08bbc59fd6e23d5a67264a194215d1ab9b11d9079d72f744ae5d19a69b4043441adf72830c36edeb61edae09280581b4754c72ea5df7b344dbcb3c1
- SSDEEP 6144:FWVrC1c2oonALgPLj7vf1LKlyIFVirGcEOkCybEaQRXr9HNdvOa+y8K:FkCO2zVPX7vf1LKlIsOkx2LIa+y
- TLSH T1ABC47C2AF6A0C036C4779574C4A257AAFFB1B42127204ACFA390475A1F637E2BE7531D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10- Custom signature
UPX dump on OEP (original entry point)
Executes dropped EXE
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
Drops file in System32 directory