General
- Target 2026-09-06_4727a653405392d57625ab65d2bbfb2a_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- Sample260907-ent9tsybrd
- SHA256 cf7e254f02b0fff55c26b38e14026fe66ed05c3d04aff7c73bc5f477a0bc0da7
- MD5 4727a653405392d57625ab65d2bbfb2a
- SHA1 4f58787ea33e3323c393e00ebdb25d76e8266485
- SHA512 7b3ec522326d391cf84c79eb7e2b60f99af211f5354e2859217e6e8ea0df99d26a6253dc3e676dd613be13d026854eada930363dba781792328b14b03fce9162
- SSDEEP 6144:NUJJuV1cdhIoA7vJ0CLoCgvDLe4AmFvirGcEOkCybEaQRuy8K:NYsVOdhElvkCgvDLe4usOkxHy
- TLSH T1C7C48D29B6D0C036C5B39574C4A186BAEAB17432372549CFA3D5475A0F337E2BA7930E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-09-06_4727a653405392d57625ab65d2bbfb2a_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-06_4727a653405392d57625ab65d2bbfb2a_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- SHA256 cf7e254f02b0fff55c26b38e14026fe66ed05c3d04aff7c73bc5f477a0bc0da7
- MD5 4727a653405392d57625ab65d2bbfb2a
- SHA1 4f58787ea33e3323c393e00ebdb25d76e8266485
- SHA512 7b3ec522326d391cf84c79eb7e2b60f99af211f5354e2859217e6e8ea0df99d26a6253dc3e676dd613be13d026854eada930363dba781792328b14b03fce9162
- SSDEEP 6144:NUJJuV1cdhIoA7vJ0CLoCgvDLe4AmFvirGcEOkCybEaQRuy8K:NYsVOdhElvkCgvDLe4usOkxHy
- TLSH T1C7C48D29B6D0C036C5B39574C4A186BAEAB17432372549CFA3D5475A0F337E2BA7930E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory