General
- Target 2026-08-25_b955f29471d627ed09250027bf1d302a_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- Sample260826-pacgzadb59
- SHA256 2657d57e42df7a58423c8c5ab5f69642188e3981ca55984c6480c5d3761832e6
- MD5 b955f29471d627ed09250027bf1d302a
- SHA1 0677a0c04c53929744b2c56965b4cc92969360ed
- SHA512 7eeac93ece79d84ac9937da515788849ddfe5f2d9d7398f81883b54005e8cc3e2d8a3de7e00a08069d6e9c3515a19f163854fa411c640bee8ef049d98f2da709
- SSDEEP 6144:KUJJuV1cdhIoA7vJ0CLoCgvDLe4AmFvirGcEOkCybEaQRuy8K:KYsVOdhElvkCgvDLe4usOkxHy
- TLSH T1C9C48D29B6D0C036C5B39574C4A186BAEAB17432372549CFA3D5475A0F337E2BA7930E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-25_b955f29471d627ed09250027bf1d302a_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-25_b955f29471d627ed09250027bf1d302a_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- SHA256 2657d57e42df7a58423c8c5ab5f69642188e3981ca55984c6480c5d3761832e6
- MD5 b955f29471d627ed09250027bf1d302a
- SHA1 0677a0c04c53929744b2c56965b4cc92969360ed
- SHA512 7eeac93ece79d84ac9937da515788849ddfe5f2d9d7398f81883b54005e8cc3e2d8a3de7e00a08069d6e9c3515a19f163854fa411c640bee8ef049d98f2da709
- SSDEEP 6144:KUJJuV1cdhIoA7vJ0CLoCgvDLe4AmFvirGcEOkCybEaQRuy8K:KYsVOdhElvkCgvDLe4usOkxHy
- TLSH T1C9C48D29B6D0C036C5B39574C4A186BAEAB17432372549CFA3D5475A0F337E2BA7930E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory