General
- Target 2026-09-06_72e89962133e480518171aa639bc670c_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- Sample260907-a98bcswbkd
- SHA256 b6a65796a2a4f8d572cdcc88eecc81bfd5127ede44a8bc42923511912e544643
- MD5 72e89962133e480518171aa639bc670c
- SHA1 8b79ab48c3100822eccfe936822c3284e5196219
- SHA512 1a8ffaa83b17ffb1f63add07266463213abe568277d1f66830e8cc830ca280e6901426f373e366738d0844d5e92c9ed54dc92257656b29e528e03d12caf971d1
- SSDEEP 6144:ycTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:ySvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T15DD45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-09-06_72e89962133e480518171aa639bc670c_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-06_72e89962133e480518171aa639bc670c_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- SHA256 b6a65796a2a4f8d572cdcc88eecc81bfd5127ede44a8bc42923511912e544643
- MD5 72e89962133e480518171aa639bc670c
- SHA1 8b79ab48c3100822eccfe936822c3284e5196219
- SHA512 1a8ffaa83b17ffb1f63add07266463213abe568277d1f66830e8cc830ca280e6901426f373e366738d0844d5e92c9ed54dc92257656b29e528e03d12caf971d1
- SSDEEP 6144:ycTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:ySvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T15DD45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory