General
- Target 2026-08-31_ec71cdc0cdffb1ce0fe843179a09f416_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- Sample260831-qdmyjsvyax
- SHA256 270f90f54b3db8201a7dd86f02d94100ff6823af020a202e4bbcc66c1e588b03
- MD5 ec71cdc0cdffb1ce0fe843179a09f416
- SHA1 f66dcf0a5b8d681b9fb37cb85572a169686d00fb
- SHA512 1b5db87760d7c618ea93b046ffc4ed6a394e9e2bc8b5a16f5c00a6e8c0bbe9e919567467cc5e8274ef52297e7959514fc40f4a6b5df9d0c43d5acccb3c725479
- SSDEEP 6144:3cTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:3SvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T1A4D45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-31_ec71cdc0cdffb1ce0fe843179a09f416_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-31_ec71cdc0cdffb1ce0fe843179a09f416_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- SHA256 270f90f54b3db8201a7dd86f02d94100ff6823af020a202e4bbcc66c1e588b03
- MD5 ec71cdc0cdffb1ce0fe843179a09f416
- SHA1 f66dcf0a5b8d681b9fb37cb85572a169686d00fb
- SHA512 1b5db87760d7c618ea93b046ffc4ed6a394e9e2bc8b5a16f5c00a6e8c0bbe9e919567467cc5e8274ef52297e7959514fc40f4a6b5df9d0c43d5acccb3c725479
- SSDEEP 6144:3cTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:3SvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T1A4D45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory