General
- Target 2026-08-30_f975c36787f1ed8deeb47dc970bd9a5e_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- Sample260831-apcnyssepg
- SHA256 bb1626c9f1046ceca2ec251e5fa0030678b5eafd5b0c2730d7c5437774082116
- MD5 f975c36787f1ed8deeb47dc970bd9a5e
- SHA1 75ad99cd51f9bf0170828160db5534e8a4b455a5
- SHA512 07bc7e01f825014c94ccf6e4b97c7fe64e4204490c01240c162783d04f0207d60a7cd6c9e4bb71a0f059cdbc7cae66038eaed84ef1a7847c84a317a3c4156c59
- SSDEEP 6144:6WVrC1c2oonALgPLj7vf1LKlyIFVirGcEOkCybEaQRuy8K:6kCO2zVPX7vf1LKlIsOkxHy
- TLSH T1EBC47C29B690D076C4779574C4A187AAFAB1B432372449CFB3D00B5A1F237E2BA7530E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-30_f975c36787f1ed8deeb47dc970bd9a5e_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-30_f975c36787f1ed8deeb47dc970bd9a5e_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- SHA256 bb1626c9f1046ceca2ec251e5fa0030678b5eafd5b0c2730d7c5437774082116
- MD5 f975c36787f1ed8deeb47dc970bd9a5e
- SHA1 75ad99cd51f9bf0170828160db5534e8a4b455a5
- SHA512 07bc7e01f825014c94ccf6e4b97c7fe64e4204490c01240c162783d04f0207d60a7cd6c9e4bb71a0f059cdbc7cae66038eaed84ef1a7847c84a317a3c4156c59
- SSDEEP 6144:6WVrC1c2oonALgPLj7vf1LKlyIFVirGcEOkCybEaQRuy8K:6kCO2zVPX7vf1LKlIsOkxHy
- TLSH T1EBC47C29B690D076C4779574C4A187AAFAB1B432372449CFB3D00B5A1F237E2BA7530E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Custom signature
UPX dump on OEP (original entry point)
Executes dropped EXE
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
Drops file in System32 directory