General
- Target 2026-09-04_40a5061b06a9f91d78debe5dcf2760bc_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- Sample260905-qdcsksvfph
- SHA256 f21442f8b93786b052e90805882236b3cd47f99048110e7a21d091ccc54c0288
- MD5 40a5061b06a9f91d78debe5dcf2760bc
- SHA1 74dc73f0c0077eda7e76caaa59385e72434fabb3
- SHA512 99371f1e3a60f6d4a9477e578a50e49533a6d01e8d6ebb2628fd263933fd718191598774d9ead2c6fa9a6fd6e7a64578b706015b9539db406e67e8a74f53f4a4
- SSDEEP 6144:I4ZaN1cb90oOTFmIFLq0cvnXhLCqj2EFNirGcEOkCybEaQRuy8K:IrNOb9+sIF+0cvnXhLCqEsOkxHy
- TLSH T10BC48D29B6E0C076C4B79578C4A186B6FAB17832372459CFA394075A1F337E2BA3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-09-04_40a5061b06a9f91d78debe5dcf2760bc_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-04_40a5061b06a9f91d78debe5dcf2760bc_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- SHA256 f21442f8b93786b052e90805882236b3cd47f99048110e7a21d091ccc54c0288
- MD5 40a5061b06a9f91d78debe5dcf2760bc
- SHA1 74dc73f0c0077eda7e76caaa59385e72434fabb3
- SHA512 99371f1e3a60f6d4a9477e578a50e49533a6d01e8d6ebb2628fd263933fd718191598774d9ead2c6fa9a6fd6e7a64578b706015b9539db406e67e8a74f53f4a4
- SSDEEP 6144:I4ZaN1cb90oOTFmIFLq0cvnXhLCqj2EFNirGcEOkCybEaQRuy8K:IrNOb9+sIF+0cvnXhLCqEsOkxHy
- TLSH T10BC48D29B6E0C076C4B79578C4A186B6FAB17832372459CFA394075A1F337E2BA3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory