General
- Target 2026-09-29_2e1c7f9bd234e7c2f2bdf385e8c2cc87_amadey_coinminer_elex_smoke-loader_stop
- Size 511KB
- Sample260930-2kdh8stejc
- SHA256 8b3a0644cc3201e3d8a8ce17fcd8a3d229c0b59e9239c9555dfa6e5cb5b07d0b
- MD5 2e1c7f9bd234e7c2f2bdf385e8c2cc87
- SHA1 2b390d17113a434daaf3d6a6639c04f65ad0ff27
- SHA512 64f6d1ecfc6735c39506cff45a91b543cb4b6f56afe3c5e473a6741e78f8841f04ab4df8f647c4c3d1af55671cce8bfe2171bccae56b0c2e39b4cef48ca3bf72
- SSDEEP 6144:TcTgav1cdCTuoPbgwmOLJvKRILSFvdFDcEOkCybEaQRXr9HNdvOax5Rv0:TSvO2x9mONvKRILSFnOkx2LIax5F0
- TLSH T1B8B45C26F6908036C4B34575C5F64BAAFAB4BC21631156CBA3943A6A1F737D2BD3130E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-29_2e1c7f9bd234e7c2f2bdf385e8c2cc87_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-29_2e1c7f9bd234e7c2f2bdf385e8c2cc87_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-29_2e1c7f9bd234e7c2f2bdf385e8c2cc87_amadey_coinminer_elex_smoke-loader_stop
- Size 511KB
- SHA256 8b3a0644cc3201e3d8a8ce17fcd8a3d229c0b59e9239c9555dfa6e5cb5b07d0b
- MD5 2e1c7f9bd234e7c2f2bdf385e8c2cc87
- SHA1 2b390d17113a434daaf3d6a6639c04f65ad0ff27
- SHA512 64f6d1ecfc6735c39506cff45a91b543cb4b6f56afe3c5e473a6741e78f8841f04ab4df8f647c4c3d1af55671cce8bfe2171bccae56b0c2e39b4cef48ca3bf72
- SSDEEP 6144:TcTgav1cdCTuoPbgwmOLJvKRILSFvdFDcEOkCybEaQRXr9HNdvOax5Rv0:TSvO2x9mONvKRILSFnOkx2LIax5F0
- TLSH T1B8B45C26F6908036C4B34575C5F64BAAFAB4BC21631156CBA3943A6A1F737D2BD3130E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory