General
- Target 2026-08-30_ddb2009e69a95f3145c642d7eb3c0a2b_amadey_coinminer_elex_smoke-loader_stop
- Size 395KB
- Sample260831-ddsskstfjh
- SHA256 03d1c88181b68e414d59ec20ff0b305f11fdd5672a21a44ceb381f727925f013
- MD5 ddb2009e69a95f3145c642d7eb3c0a2b
- SHA1 2a0e7e14613527d6e6212c3036c9d9d69eb08643
- SHA512 2c148933463edf1419b0b24a24f22a650525faae1d672b54d1964b0e1b2533abc10efdcda39e2a3fa50e34bb55774c08363e3f8495008eade8f22697fde0bd8e
- SSDEEP 6144:PcbcTgav1cdCTuoPbgwmOLJvKRILSFvdFDcEOkCybEaQRXr9HNdvOa:PCSvO2x9mONvKRILSFnOkx2LIa
- TLSH T132846D2AB6A0D076C4B79579C4A247BAFBB1742137204ACFA390475A1F637E2BD3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-30_ddb2009e69a95f3145c642d7eb3c0a2b_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-30_ddb2009e69a95f3145c642d7eb3c0a2b_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-30_ddb2009e69a95f3145c642d7eb3c0a2b_amadey_coinminer_elex_smoke-loader_stop
- Size 395KB
- SHA256 03d1c88181b68e414d59ec20ff0b305f11fdd5672a21a44ceb381f727925f013
- MD5 ddb2009e69a95f3145c642d7eb3c0a2b
- SHA1 2a0e7e14613527d6e6212c3036c9d9d69eb08643
- SHA512 2c148933463edf1419b0b24a24f22a650525faae1d672b54d1964b0e1b2533abc10efdcda39e2a3fa50e34bb55774c08363e3f8495008eade8f22697fde0bd8e
- SSDEEP 6144:PcbcTgav1cdCTuoPbgwmOLJvKRILSFvdFDcEOkCybEaQRXr9HNdvOa:PCSvO2x9mONvKRILSFnOkx2LIa
- TLSH T132846D2AB6A0D076C4B79579C4A247BAFBB1742137204ACFA390475A1F637E2BD3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory