General
- Target 2026-09-07_76023b85a5417717afb6aa39549cb2a5_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- Sample260908-2wt1cshh95
- SHA256 133dec3b6f5a43870160c12b94345ec2f6a8db4d078d300b7f20fa8477362306
- MD5 76023b85a5417717afb6aa39549cb2a5
- SHA1 3902081be67076b2e623949f606622b4995b5e87
- SHA512 94eb5319921c4c665d059c94cc95b682335bead15f42a862d46a7d564ade187fbd78ed19614b37edd0d6fa89d1600bdbb1a67596bb7cc7af7c06a355ef7d8a43
- SSDEEP 6144:A6UE71cqQEoMr5C2iKLJChYSvL+8xPFxirGcEOkCybEaQRXr9HNdvOa+y8K:AO7OqQs42iKFChYSvL+8AsOkx2LIa+y
- TLSH T1F9C46C26B6A0D076C4B79574C4A28BA6FFB1742227244BCFA39047561F637E2BE3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-09-07_76023b85a5417717afb6aa39549cb2a5_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-07_76023b85a5417717afb6aa39549cb2a5_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- SHA256 133dec3b6f5a43870160c12b94345ec2f6a8db4d078d300b7f20fa8477362306
- MD5 76023b85a5417717afb6aa39549cb2a5
- SHA1 3902081be67076b2e623949f606622b4995b5e87
- SHA512 94eb5319921c4c665d059c94cc95b682335bead15f42a862d46a7d564ade187fbd78ed19614b37edd0d6fa89d1600bdbb1a67596bb7cc7af7c06a355ef7d8a43
- SSDEEP 6144:A6UE71cqQEoMr5C2iKLJChYSvL+8xPFxirGcEOkCybEaQRXr9HNdvOa+y8K:AO7OqQs42iKFChYSvL+8AsOkx2LIa+y
- TLSH T1F9C46C26B6A0D076C4B79574C4A28BA6FFB1742227244BCFA39047561F637E2BE3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory