General
- Target 2026-08-30_aa86462421b575f2be20f0476cbd445c_amadey_coinminer_elex_smoke-loader_stop
- Size 638KB
- Sample260831-hsddnayydv
- SHA256 87eb72146b35284c0b300899b1aa28fae4163d6249db899a9ab8da00fec3fc95
- MD5 aa86462421b575f2be20f0476cbd445c
- SHA1 b13b1efdd71a944e61820de6ca97970724985605
- SHA512 7e61a53d433ee1ed76d83250fd75594ffa73c95353d74ae39985823ef2306f5dfefa5971211d01f4cc8fb0d7a9f002038fa1aa39215c05040cbd3b9b1c29edfc
- SSDEEP 6144:AcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8KU5R2:ASvO2x9mONvKRwLSFtsOkx2LIa+ya5g
- TLSH T17CD46B26B6908037C0B74675C5B64BAAFAB5BC21631186CFA380761A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-30_aa86462421b575f2be20f0476cbd445c_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-30_aa86462421b575f2be20f0476cbd445c_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-30_aa86462421b575f2be20f0476cbd445c_amadey_coinminer_elex_smoke-loader_stop
- Size 638KB
- SHA256 87eb72146b35284c0b300899b1aa28fae4163d6249db899a9ab8da00fec3fc95
- MD5 aa86462421b575f2be20f0476cbd445c
- SHA1 b13b1efdd71a944e61820de6ca97970724985605
- SHA512 7e61a53d433ee1ed76d83250fd75594ffa73c95353d74ae39985823ef2306f5dfefa5971211d01f4cc8fb0d7a9f002038fa1aa39215c05040cbd3b9b1c29edfc
- SSDEEP 6144:AcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8KU5R2:ASvO2x9mONvKRwLSFtsOkx2LIa+ya5g
- TLSH T17CD46B26B6908037C0B74675C5B64BAAFAB5BC21631186CFA380761A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory