General
- Target 2026-08-30_4458e73a5c03be2d845f33b1cc7026a7_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- Sample260831-pch3ja1ejf
- SHA256 be4eee8db97e330196c367f3aa8f44fb00436c97abb09a3bf4fd0de2f6359614
- MD5 4458e73a5c03be2d845f33b1cc7026a7
- SHA1 d8dfbf884d017ca48f727e59a3cfa65a343bf7f8
- SHA512 aa28ceb3c4a3760c1402f555af54eb97c4525b962874e63b06331b178be239eb4c0c52561e6b20e01b981504caba8a88e9190e5a931238d5b5f23daa793afa56
- SSDEEP 6144:KWVrC1c2oonALgPLj7vf1LKlyIFVirGcEOkCybEaQRXr9HNdvOa+y8K:KkCO2zVPX7vf1LKlIsOkx2LIa+y
- TLSH T1DDC47C2AF6A0C036C4779574C4A257AAFFB1B42127204ACFA390475A1F637E2BE7531D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-30_4458e73a5c03be2d845f33b1cc7026a7_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-30_4458e73a5c03be2d845f33b1cc7026a7_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- SHA256 be4eee8db97e330196c367f3aa8f44fb00436c97abb09a3bf4fd0de2f6359614
- MD5 4458e73a5c03be2d845f33b1cc7026a7
- SHA1 d8dfbf884d017ca48f727e59a3cfa65a343bf7f8
- SHA512 aa28ceb3c4a3760c1402f555af54eb97c4525b962874e63b06331b178be239eb4c0c52561e6b20e01b981504caba8a88e9190e5a931238d5b5f23daa793afa56
- SSDEEP 6144:KWVrC1c2oonALgPLj7vf1LKlyIFVirGcEOkCybEaQRXr9HNdvOa+y8K:KkCO2zVPX7vf1LKlIsOkx2LIa+y
- TLSH T1DDC47C2AF6A0C036C4779574C4A257AAFFB1B42127204ACFA390475A1F637E2BE7531D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory