General
- Target 2026-09-06_1752fd91b620329021f952a7c03a0e97_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- Sample260907-jattcsep7t
- SHA256 280274d9f0fb47263f5d288b627a9baae3965e10ce32284e1a87c7865a7f17e0
- MD5 1752fd91b620329021f952a7c03a0e97
- SHA1 148dcd7d0efeb5d299d27400ccad30d366d12ccd
- SHA512 9e379079cc74378bd69e095478828b54ea3b93759358a365d85352b2b3f171b130b4108195075561d68b4179c7e15822314c9131b3f3e849c4dbc5e40be5ec40
- SSDEEP 6144:/cTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:/SvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T18DD45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-09-06_1752fd91b620329021f952a7c03a0e97_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-06_1752fd91b620329021f952a7c03a0e97_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- SHA256 280274d9f0fb47263f5d288b627a9baae3965e10ce32284e1a87c7865a7f17e0
- MD5 1752fd91b620329021f952a7c03a0e97
- SHA1 148dcd7d0efeb5d299d27400ccad30d366d12ccd
- SHA512 9e379079cc74378bd69e095478828b54ea3b93759358a365d85352b2b3f171b130b4108195075561d68b4179c7e15822314c9131b3f3e849c4dbc5e40be5ec40
- SSDEEP 6144:/cTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:/SvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T18DD45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory