General
- Target 2026-06-30_c9d1e2d677394dfbd5fcb789b4791ec1_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- Sample260701-da4qnsc13k
- SHA256 f3abd48c6a8c4ed1bed5b0f1e850051930b0a319f95f11cea5f1322c05af85c3
- MD5 c9d1e2d677394dfbd5fcb789b4791ec1
- SHA1 c906b2d08a9b82173961061215d11a6960701fe0
- SHA512 5e81145ba47edf962fff67ea7d0752031ef398609f007cef3054c8a6ed4add9c92b0707463aa6c510cb8e01a488197ab4143616d92e18983bc13599024b9be22
- SSDEEP 6144:j4ZaN1cb90oOTFmIFLq0cvnXhLCqj2EFNirGcEOkCybEaQRuy8K:jrNOb9+sIF+0cvnXhLCqEsOkxHy
- TLSH T1BAC48D29B6E0C076C4B79578C4A186B6FAB17832372459CFA394075A1F337E2BA3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-06-30_c9d1e2d677394dfbd5fcb789b4791ec1_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-30_c9d1e2d677394dfbd5fcb789b4791ec1_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- SHA256 f3abd48c6a8c4ed1bed5b0f1e850051930b0a319f95f11cea5f1322c05af85c3
- MD5 c9d1e2d677394dfbd5fcb789b4791ec1
- SHA1 c906b2d08a9b82173961061215d11a6960701fe0
- SHA512 5e81145ba47edf962fff67ea7d0752031ef398609f007cef3054c8a6ed4add9c92b0707463aa6c510cb8e01a488197ab4143616d92e18983bc13599024b9be22
- SSDEEP 6144:j4ZaN1cb90oOTFmIFLq0cvnXhLCqj2EFNirGcEOkCybEaQRuy8K:jrNOb9+sIF+0cvnXhLCqEsOkxHy
- TLSH T1BAC48D29B6E0C076C4B79578C4A186B6FAB17832372459CFA394075A1F337E2BA3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Custom signature
UPX dump on OEP (original entry point)
Executes dropped EXE
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
Drops file in System32 directory