General
- Target 2026-09-19_324d4fd06114fe9d4c51313acb197afc_amadey_coinminer_elex_smoke-loader_stop
- Size 615KB
- Sample260919-m8d3caee35
- SHA256 a4f15f491c2fb4cf87a488e97b9cd276fa1ee71f45e553a47cd04622f9bf2d08
- MD5 324d4fd06114fe9d4c51313acb197afc
- SHA1 9f1138bae7535f85e14a0666637d040f3b82ae6b
- SHA512 4c991281b1f341ad3dd59e668b3732ac2c69b3533eb57f77f9492a891a49b11ed50b57f440c650c5817bd9d078e55d771d81a5b091769f1996e1396b68be4fda
- SSDEEP 12288:CSvO2x9mONvKRILSFnOkx2LIax5FAQjU/Liw:JvO2xJKRI2FOkx2LFicUV
- TLSH T13AD44A31E241C03AD4A74576C6FA0BAFE5647D25531165CBA3C43A2A2FB36D2BE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-19_324d4fd06114fe9d4c51313acb197afc_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-19_324d4fd06114fe9d4c51313acb197afc_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-19_324d4fd06114fe9d4c51313acb197afc_amadey_coinminer_elex_smoke-loader_stop
- Size 615KB
- SHA256 a4f15f491c2fb4cf87a488e97b9cd276fa1ee71f45e553a47cd04622f9bf2d08
- MD5 324d4fd06114fe9d4c51313acb197afc
- SHA1 9f1138bae7535f85e14a0666637d040f3b82ae6b
- SHA512 4c991281b1f341ad3dd59e668b3732ac2c69b3533eb57f77f9492a891a49b11ed50b57f440c650c5817bd9d078e55d771d81a5b091769f1996e1396b68be4fda
- SSDEEP 12288:CSvO2x9mONvKRILSFnOkx2LIax5FAQjU/Liw:JvO2xJKRI2FOkx2LFicUV
- TLSH T13AD44A31E241C03AD4A74576C6FA0BAFE5647D25531165CBA3C43A2A2FB36D2BE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory