General
- Target 2026-07-09_9c0c8c0b318435acf29174e7e61ba47f_amadey_coinminer_elex_smoke-loader_stop
- Size 525KB
- Sample260709-mfeheagw3r
- SHA256 a4d3c3199899d03d83292944581825e471f0d869c53c622c2cc6b249352d6c76
- MD5 9c0c8c0b318435acf29174e7e61ba47f
- SHA1 4bed5afa41c463b29e269c9583123e6f9b9b3d7f
- SHA512 206648b28c563c3fbf5c677d6e1d45347cd98aa010ebc422944f268e09fea1ce7172320f3ee0a539f89576b4a3fe13e462ffb2dfe6102e5b1991de2f794ba460
- SSDEEP 6144:ecTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K:eSvO2x9mONvKRwLSFtsOkx2LIa+y
- TLSH T157B47D2AB6A0D076C4779579C4A257BAFBB1742137204ACFA390475A1F237E2BE3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-09_9c0c8c0b318435acf29174e7e61ba47f_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_9c0c8c0b318435acf29174e7e61ba47f_amadey_coinminer_elex_smoke-loader_stop
- Size 525KB
- SHA256 a4d3c3199899d03d83292944581825e471f0d869c53c622c2cc6b249352d6c76
- MD5 9c0c8c0b318435acf29174e7e61ba47f
- SHA1 4bed5afa41c463b29e269c9583123e6f9b9b3d7f
- SHA512 206648b28c563c3fbf5c677d6e1d45347cd98aa010ebc422944f268e09fea1ce7172320f3ee0a539f89576b4a3fe13e462ffb2dfe6102e5b1991de2f794ba460
- SSDEEP 6144:ecTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K:eSvO2x9mONvKRwLSFtsOkx2LIa+y
- TLSH T157B47D2AB6A0D076C4779579C4A257BAFBB1742137204ACFA390475A1F237E2BE3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Custom signature
UPX dump on OEP (original entry point)
Executes dropped EXE
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
Drops file in System32 directory