General
- Target 2026-09-07_3122d8784ca4f6f58f3403c249d6ce21_amadey_coinminer_elex_smoke-loader_stop
- Size 615KB
- Sample260909-exwh9abl61
- SHA256 ecbb449d0262aaca6a676f2aeadff093acc6ef9a923edee8434a035cf793f774
- MD5 3122d8784ca4f6f58f3403c249d6ce21
- SHA1 3bf1765e03e48e1c3fb1f0745d42d0f2db526786
- SHA512 5cd9878cbfe90e02f972a24ea45e9629603a84ab3547b3c5e35a3ab54c5ad25550a3ca560ad0bda428d499dec8665cf3793355e4441677b0e013d2db7063d494
- SSDEEP 12288:DSvO2x9mONvKRILSFnOkx2LIax5FAQjU/Liw:2vO2xJKRI2FOkx2LFicUV
- TLSH T1ADD44A31E241C03AD4A74576C6FA0BAFE5647D25531165CBA3C43A2A2FB36D2BE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-07_3122d8784ca4f6f58f3403c249d6ce21_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-07_3122d8784ca4f6f58f3403c249d6ce21_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-07_3122d8784ca4f6f58f3403c249d6ce21_amadey_coinminer_elex_smoke-loader_stop
- Size 615KB
- SHA256 ecbb449d0262aaca6a676f2aeadff093acc6ef9a923edee8434a035cf793f774
- MD5 3122d8784ca4f6f58f3403c249d6ce21
- SHA1 3bf1765e03e48e1c3fb1f0745d42d0f2db526786
- SHA512 5cd9878cbfe90e02f972a24ea45e9629603a84ab3547b3c5e35a3ab54c5ad25550a3ca560ad0bda428d499dec8665cf3793355e4441677b0e013d2db7063d494
- SSDEEP 12288:DSvO2x9mONvKRILSFnOkx2LIax5FAQjU/Liw:2vO2xJKRI2FOkx2LFicUV
- TLSH T1ADD44A31E241C03AD4A74576C6FA0BAFE5647D25531165CBA3C43A2A2FB36D2BE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory