General
- Target 2026-08-28_2287da1126401355c562f77ba12735a6_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- Sample260828-y5g6datajb
- SHA256 0e6f8ebd34393c29751adbf2260907da1bade45bfa12891a12373529e42f959e
- MD5 2287da1126401355c562f77ba12735a6
- SHA1 64846a11a92384862ba16ec46f3b11fa0cf8aac7
- SHA512 15b3cce3bd837c7dd46cff83c997ee18ec1078c9e2b11e3134b36d50892c3d484ffedfc56a4fa45792cb602043b3d3942f417c9d6730ebbff2b1bb00973b44cf
- SSDEEP 6144:cWVrC1c2oonALgPLj7vf1LKlyIFVirGcEOkCybEaQRuy8K:ckCO2zVPX7vf1LKlIsOkxHy
- TLSH T186C47C29B690D076C4779574C4A187AAFAB1B432372449CFB3D00B5A1F237E2BA7530E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-28_2287da1126401355c562f77ba12735a6_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-28_2287da1126401355c562f77ba12735a6_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- SHA256 0e6f8ebd34393c29751adbf2260907da1bade45bfa12891a12373529e42f959e
- MD5 2287da1126401355c562f77ba12735a6
- SHA1 64846a11a92384862ba16ec46f3b11fa0cf8aac7
- SHA512 15b3cce3bd837c7dd46cff83c997ee18ec1078c9e2b11e3134b36d50892c3d484ffedfc56a4fa45792cb602043b3d3942f417c9d6730ebbff2b1bb00973b44cf
- SSDEEP 6144:cWVrC1c2oonALgPLj7vf1LKlyIFVirGcEOkCybEaQRuy8K:ckCO2zVPX7vf1LKlIsOkxHy
- TLSH T186C47C29B690D076C4779574C4A187AAFAB1B432372449CFB3D00B5A1F237E2BA7530E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory