General
- Target 2026-08-30_f46f2e106ec2a5188f00b4032fb93384_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- Sample260831-a5llssvxav
- SHA256 01c3705485beebebdb016fa13029c65f3ec36d93f935b0cc5eb6229fc1bb8fc6
- MD5 f46f2e106ec2a5188f00b4032fb93384
- SHA1 a8a3abbac936037f44f0b196a527ea427e3b200b
- SHA512 9c4bfb12451624d50c49e1e4aa218e75cf3361b8f2c59b62d4703edd2b397e058835a06374a83267a8d8ccab0d538e29ca48f44b1257c1cdd6bfab463d9e0d26
- SSDEEP 6144:Rgye71cE4poJTqvpQLXNKFyLWD1nFairGcEOkCybEaQRuy8K:RI7OE4kopQzNKFyLWDHsOkxHy
- TLSH T1FCC48C2AB690C076C4B7D534C5E197AAEAB17432372449CFA3D0075A1F237E2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-30_f46f2e106ec2a5188f00b4032fb93384_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-30_f46f2e106ec2a5188f00b4032fb93384_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- SHA256 01c3705485beebebdb016fa13029c65f3ec36d93f935b0cc5eb6229fc1bb8fc6
- MD5 f46f2e106ec2a5188f00b4032fb93384
- SHA1 a8a3abbac936037f44f0b196a527ea427e3b200b
- SHA512 9c4bfb12451624d50c49e1e4aa218e75cf3361b8f2c59b62d4703edd2b397e058835a06374a83267a8d8ccab0d538e29ca48f44b1257c1cdd6bfab463d9e0d26
- SSDEEP 6144:Rgye71cE4poJTqvpQLXNKFyLWD1nFairGcEOkCybEaQRuy8K:RI7OE4kopQzNKFyLWDHsOkxHy
- TLSH T1FCC48C2AB690C076C4B7D534C5E197AAEAB17432372449CFA3D0075A1F237E2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Custom signature
UPX dump on OEP (original entry point)
Executes dropped EXE
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
Drops file in System32 directory