General
- Target 2026-09-04_2cceb3ef7f840aaa8e20d2562b4f053e_amadey_coinminer_elex_smoke-loader_stop
- Size 615KB
- Sample260905-svjcssxekg
- SHA256 dc2a98bc2cf8f0cf8c8cf48f37878348e43b3d9e9eb83154d8c7e1114f48692e
- MD5 2cceb3ef7f840aaa8e20d2562b4f053e
- SHA1 a92a6adaac73bbf3721d423c91ebf062267ab4f0
- SHA512 3faad51c3f6911262b5005d3953f3aa9136c6e0c53600ad11f8c98ee0cda01a78c70919b70876bfeb952229b43463c275d48722af50a9c6b98741b481d67db05
- SSDEEP 12288:0SvO2x9mONvKRILSFnOkx2LIax5FAQjU/Liw:HvO2xJKRI2FOkx2LFicUV
- TLSH T1D8D44A31E241C03AD4A74576C6FA0BAFE5647D25531165CBA3C43A2A2FB36D2BE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-04_2cceb3ef7f840aaa8e20d2562b4f053e_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-04_2cceb3ef7f840aaa8e20d2562b4f053e_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-04_2cceb3ef7f840aaa8e20d2562b4f053e_amadey_coinminer_elex_smoke-loader_stop
- Size 615KB
- SHA256 dc2a98bc2cf8f0cf8c8cf48f37878348e43b3d9e9eb83154d8c7e1114f48692e
- MD5 2cceb3ef7f840aaa8e20d2562b4f053e
- SHA1 a92a6adaac73bbf3721d423c91ebf062267ab4f0
- SHA512 3faad51c3f6911262b5005d3953f3aa9136c6e0c53600ad11f8c98ee0cda01a78c70919b70876bfeb952229b43463c275d48722af50a9c6b98741b481d67db05
- SSDEEP 12288:0SvO2x9mONvKRILSFnOkx2LIax5FAQjU/Liw:HvO2xJKRI2FOkx2LFicUV
- TLSH T1D8D44A31E241C03AD4A74576C6FA0BAFE5647D25531165CBA3C43A2A2FB36D2BE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory