General
- Target 2026-08-26_f4cd0b1fb2a3c5c4f475e7644fadc27e_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- Sample260827-csrcmaw1ct
- SHA256 2b280af3579994556e9ab9b5b198ed10a9626947867220a384c40874ef0c6161
- MD5 f4cd0b1fb2a3c5c4f475e7644fadc27e
- SHA1 b7adf698f0d07c5519f44519c7950e46bfb00fab
- SHA512 6c7cc92484489135ec45fabc5e8a506da96d8aed9f23bc8f30472c139fbaa6af4f732f1f4c8c7f4a5d27d98e7d0f96efb8f643ce05c6f72dfb7618fcbc406939
- SSDEEP 6144:44ZaN1cb90oOTFmIFLq0cvnXhLCqj2EFNirGcEOkCybEaQRuy8K:4rNOb9+sIF+0cvnXhLCqEsOkxHy
- TLSH T1A3C48D29B6E0C076C4B79578C4A186B6FAB17832372459CFA394075A1F337E2BA3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-26_f4cd0b1fb2a3c5c4f475e7644fadc27e_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-26_f4cd0b1fb2a3c5c4f475e7644fadc27e_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- SHA256 2b280af3579994556e9ab9b5b198ed10a9626947867220a384c40874ef0c6161
- MD5 f4cd0b1fb2a3c5c4f475e7644fadc27e
- SHA1 b7adf698f0d07c5519f44519c7950e46bfb00fab
- SHA512 6c7cc92484489135ec45fabc5e8a506da96d8aed9f23bc8f30472c139fbaa6af4f732f1f4c8c7f4a5d27d98e7d0f96efb8f643ce05c6f72dfb7618fcbc406939
- SSDEEP 6144:44ZaN1cb90oOTFmIFLq0cvnXhLCqj2EFNirGcEOkCybEaQRuy8K:4rNOb9+sIF+0cvnXhLCqEsOkxHy
- TLSH T1A3C48D29B6E0C076C4B79578C4A186B6FAB17832372459CFA394075A1F337E2BA3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory