General
- Target 2026-09-03_8ce18d8a532b90e7dc2eba7752f1afb2_amadey_coinminer_elex_smoke-loader_stop
- Size 638KB
- Sample260905-2vtcfagc87
- SHA256 58d3b5a37fbc992eb915b7075544e88e754f3272120ed38ff1a2454175bbb70e
- MD5 8ce18d8a532b90e7dc2eba7752f1afb2
- SHA1 3caa350da01474b418ed3e4772a804d407bfae28
- SHA512 5986b09d5e86a21078be0f6525d7bf7075c463dfca64d3d4305660830893270435e70273cde2be3be3a2da9dd70dae6417718273de1ce4582d8b390ba63df8b9
- SSDEEP 6144:xcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8KU5R2:xSvO2x9mONvKRwLSFtsOkx2LIa+ya5g
- TLSH T150D46B26B6908037C0B74675C5B64BAAFAB5BC21631186CFA380761A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-09-03_8ce18d8a532b90e7dc2eba7752f1afb2_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-03_8ce18d8a532b90e7dc2eba7752f1afb2_amadey_coinminer_elex_smoke-loader_stop
- Size 638KB
- SHA256 58d3b5a37fbc992eb915b7075544e88e754f3272120ed38ff1a2454175bbb70e
- MD5 8ce18d8a532b90e7dc2eba7752f1afb2
- SHA1 3caa350da01474b418ed3e4772a804d407bfae28
- SHA512 5986b09d5e86a21078be0f6525d7bf7075c463dfca64d3d4305660830893270435e70273cde2be3be3a2da9dd70dae6417718273de1ce4582d8b390ba63df8b9
- SSDEEP 6144:xcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8KU5R2:xSvO2x9mONvKRwLSFtsOkx2LIa+ya5g
- TLSH T150D46B26B6908037C0B74675C5B64BAAFAB5BC21631186CFA380761A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory