General
- Target 2026-09-07_fc44afdf59fbb2299cd734d84388e17f_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- Sample260908-agnfgsca45
- SHA256 051868e98afb11cf8470fa32b824ba85832ae5aaf7320f97a1a1ea518e1fd8ae
- MD5 fc44afdf59fbb2299cd734d84388e17f
- SHA1 823b7f746d3e1fb860a65289d8894c8d1790d9cc
- SHA512 19608d0a27ddccf863dcc6a2933b348dfd98c3a0e4274a321c37f1e44f18ce1fcc9f09c6fb6b4df36cbb25f9cba7da6ca1d5d12de8decf3b183ad6e0a8c4de4b
- SSDEEP 6144:AWVrC1c2oonALgPLj7vf1LKlyIFVirGcEOkCybEaQRuy8K:AkCO2zVPX7vf1LKlIsOkxHy
- TLSH T101C47C29B690D076C4779574C4A187AAFAB1B432372449CFB3D00B5A1F237E2BA7530E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-09-07_fc44afdf59fbb2299cd734d84388e17f_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-07_fc44afdf59fbb2299cd734d84388e17f_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- SHA256 051868e98afb11cf8470fa32b824ba85832ae5aaf7320f97a1a1ea518e1fd8ae
- MD5 fc44afdf59fbb2299cd734d84388e17f
- SHA1 823b7f746d3e1fb860a65289d8894c8d1790d9cc
- SHA512 19608d0a27ddccf863dcc6a2933b348dfd98c3a0e4274a321c37f1e44f18ce1fcc9f09c6fb6b4df36cbb25f9cba7da6ca1d5d12de8decf3b183ad6e0a8c4de4b
- SSDEEP 6144:AWVrC1c2oonALgPLj7vf1LKlyIFVirGcEOkCybEaQRuy8K:AkCO2zVPX7vf1LKlIsOkxHy
- TLSH T101C47C29B690D076C4779574C4A187AAFAB1B432372449CFB3D00B5A1F237E2BA7530E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory