General
- Target 2026-09-07_b1ea5efb5bfe6d21bf806ca5871cea4b_amadey_coinminer_elex_smoke-loader_stop
- Size 761KB
- Sample260908-jzbdbavsat
- SHA256 e4b221203c16917eb2d6c229e334f25478edd94fda8580577098209fdffce4a4
- MD5 b1ea5efb5bfe6d21bf806ca5871cea4b
- SHA1 3e9ff69f0e07a00c88e50ab70500ae782e9662bc
- SHA512 ed3f0e9f501b8801d0ed6048e2dbc262c3bca3e20f30d5fae34313c0f8f1ebf0b204369bcdca7f72267f7cd3b7ddfe94f683b9665e4d567e4af80c318536285e
- SSDEEP 12288:fSvO2x9mONvKRwLSFtsOkxHya5hYIW0p98B:qvO2xJKRw2kOkxSkW298B
- TLSH T138F49E35A2808036C0B34532C6F94AABF9797D35631565CBA3843B662F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-09-07_b1ea5efb5bfe6d21bf806ca5871cea4b_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-07_b1ea5efb5bfe6d21bf806ca5871cea4b_amadey_coinminer_elex_smoke-loader_stop
- Size 761KB
- SHA256 e4b221203c16917eb2d6c229e334f25478edd94fda8580577098209fdffce4a4
- MD5 b1ea5efb5bfe6d21bf806ca5871cea4b
- SHA1 3e9ff69f0e07a00c88e50ab70500ae782e9662bc
- SHA512 ed3f0e9f501b8801d0ed6048e2dbc262c3bca3e20f30d5fae34313c0f8f1ebf0b204369bcdca7f72267f7cd3b7ddfe94f683b9665e4d567e4af80c318536285e
- SSDEEP 12288:fSvO2x9mONvKRwLSFtsOkxHya5hYIW0p98B:qvO2xJKRw2kOkxSkW298B
- TLSH T138F49E35A2808036C0B34532C6F94AABF9797D35631565CBA3843B662F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory