General
- Target 2026-08-30_d2b1424fd3369df3f539d65fe2cbdd0c_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- Sample260831-ee43nswzcs
- SHA256 d699198a1eb626040404aa2aa688dafaaf4a78a1d680eae54e34dafac1c6cd2a
- MD5 d2b1424fd3369df3f539d65fe2cbdd0c
- SHA1 a263bf2d1f73ce805618d6f7969bdeeaca4b9133
- SHA512 702a066b3542424d91347b33131cbe9698901809bab00b5c25aec269ee6d6520f979a32d8eef146ec49d4c032a7cd399f75a153235fad02e412da88266749d77
- SSDEEP 6144:WcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:WSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T146D45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-30_d2b1424fd3369df3f539d65fe2cbdd0c_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-30_d2b1424fd3369df3f539d65fe2cbdd0c_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- SHA256 d699198a1eb626040404aa2aa688dafaaf4a78a1d680eae54e34dafac1c6cd2a
- MD5 d2b1424fd3369df3f539d65fe2cbdd0c
- SHA1 a263bf2d1f73ce805618d6f7969bdeeaca4b9133
- SHA512 702a066b3542424d91347b33131cbe9698901809bab00b5c25aec269ee6d6520f979a32d8eef146ec49d4c032a7cd399f75a153235fad02e412da88266749d77
- SSDEEP 6144:WcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:WSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T146D45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory