General
- Target 2026-08-25_e9fa73283e6387a7ec16854bf02c77a3_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- Sample260826-elm3qsbf35
- SHA256 7b90979861839e5e447e4fe03c801dd1143e61b41baf4d2c25d9a7c6d3879a87
- MD5 e9fa73283e6387a7ec16854bf02c77a3
- SHA1 cee63a4d784fde812acc78c95af04da6d5dcba94
- SHA512 4bee342b2b6159d75ff2ce81ab8d145bf9ca5fa3ce43ddb171b3bd86361047f1ead02e9e77ff8ea13867870e959d0966a0ebec5a9f516f0c17e30e67aa6ce90f
- SSDEEP 6144:aWVrC1c2oonALgPLj7vf1LKlyIFVirGcEOkCybEaQRXr9HNdvOa+y8K:akCO2zVPX7vf1LKlIsOkx2LIa+y
- TLSH T132C47C2AF6A0C036C4779574C4A257AAFFB1B42127204ACFA390475A1F637E2BE7531D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-25_e9fa73283e6387a7ec16854bf02c77a3_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-25_e9fa73283e6387a7ec16854bf02c77a3_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- SHA256 7b90979861839e5e447e4fe03c801dd1143e61b41baf4d2c25d9a7c6d3879a87
- MD5 e9fa73283e6387a7ec16854bf02c77a3
- SHA1 cee63a4d784fde812acc78c95af04da6d5dcba94
- SHA512 4bee342b2b6159d75ff2ce81ab8d145bf9ca5fa3ce43ddb171b3bd86361047f1ead02e9e77ff8ea13867870e959d0966a0ebec5a9f516f0c17e30e67aa6ce90f
- SSDEEP 6144:aWVrC1c2oonALgPLj7vf1LKlyIFVirGcEOkCybEaQRXr9HNdvOa+y8K:akCO2zVPX7vf1LKlIsOkx2LIa+y
- TLSH T132C47C2AF6A0C036C4779574C4A257AAFFB1B42127204ACFA390475A1F637E2BE7531D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Custom signature
UPX dump on OEP (original entry point)
Executes dropped EXE
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
Drops file in System32 directory