General
- Target 2026-08-30_c8ff24c5cd163c1e434c767e777e2167_amadey_coinminer_elex_smoke-loader_stop
- Size 638KB
- Sample260831-e7485sdk7t
- SHA256 48b07a77e45186e33fb1736033f13dd34bb116f9d11e27179c7456a33821df90
- MD5 c8ff24c5cd163c1e434c767e777e2167
- SHA1 a08697516822c49c6fe8a55ae62d5097c563908a
- SHA512 2b16bb4ed3726cb61ffeefceedbde6c8d3bb396ae18551e22bf7b7111dda48f99ca86695e646489ab9dc7bc9843f8397a8f2510f4bdc55e7793b8a12192854a2
- SSDEEP 6144:LcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8KU5R2:LSvO2x9mONvKRwLSFtsOkx2LIa+ya5g
- TLSH T12AD46B26B6908037C0B74675C5B64BAAFAB5BC21631186CFA380761A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-30_c8ff24c5cd163c1e434c767e777e2167_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-30_c8ff24c5cd163c1e434c767e777e2167_amadey_coinminer_elex_smoke-loader_stop
- Size 638KB
- SHA256 48b07a77e45186e33fb1736033f13dd34bb116f9d11e27179c7456a33821df90
- MD5 c8ff24c5cd163c1e434c767e777e2167
- SHA1 a08697516822c49c6fe8a55ae62d5097c563908a
- SHA512 2b16bb4ed3726cb61ffeefceedbde6c8d3bb396ae18551e22bf7b7111dda48f99ca86695e646489ab9dc7bc9843f8397a8f2510f4bdc55e7793b8a12192854a2
- SSDEEP 6144:LcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8KU5R2:LSvO2x9mONvKRwLSFtsOkx2LIa+ya5g
- TLSH T12AD46B26B6908037C0B74675C5B64BAAFAB5BC21631186CFA380761A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory