General
- Target 2026-08-25_e9fa73283e6387a7ec16854bf02c77a3_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- Sample260826-elm3qsbf35
- SHA256 7b90979861839e5e447e4fe03c801dd1143e61b41baf4d2c25d9a7c6d3879a87
- MD5 e9fa73283e6387a7ec16854bf02c77a3
- SHA1 cee63a4d784fde812acc78c95af04da6d5dcba94
- SHA512 4bee342b2b6159d75ff2ce81ab8d145bf9ca5fa3ce43ddb171b3bd86361047f1ead02e9e77ff8ea13867870e959d0966a0ebec5a9f516f0c17e30e67aa6ce90f
- SSDEEP 6144:aWVrC1c2oonALgPLj7vf1LKlyIFVirGcEOkCybEaQRXr9HNdvOa+y8K:akCO2zVPX7vf1LKlIsOkx2LIa+y
- TLSH T132C47C2AF6A0C036C4779574C4A257AAFFB1B42127204ACFA390475A1F637E2BE7531D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-25_e9fa73283e6387a7ec16854bf02c77a3_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-25_e9fa73283e6387a7ec16854bf02c77a3_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- SHA256 7b90979861839e5e447e4fe03c801dd1143e61b41baf4d2c25d9a7c6d3879a87
- MD5 e9fa73283e6387a7ec16854bf02c77a3
- SHA1 cee63a4d784fde812acc78c95af04da6d5dcba94
- SHA512 4bee342b2b6159d75ff2ce81ab8d145bf9ca5fa3ce43ddb171b3bd86361047f1ead02e9e77ff8ea13867870e959d0966a0ebec5a9f516f0c17e30e67aa6ce90f
- SSDEEP 6144:aWVrC1c2oonALgPLj7vf1LKlyIFVirGcEOkCybEaQRXr9HNdvOa+y8K:akCO2zVPX7vf1LKlIsOkx2LIa+y
- TLSH T132C47C2AF6A0C036C4779574C4A257AAFFB1B42127204ACFA390475A1F637E2BE7531D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory