General
- Target 2026-09-07_a7d4474e90ccbb26c5c9d89410e3f3db_amadey_coinminer_elex_smoke-loader_stop
- Size 766KB
- Sample260908-kq45pswepb
- SHA256 41410e29c55a683e1562d65fc8306427ff52c7e356c3368123b58c33349fd787
- MD5 a7d4474e90ccbb26c5c9d89410e3f3db
- SHA1 94917e1cc25a54a7728828ead740013abe39671c
- SHA512 008e5a32b53f2e31e1375264f6437d2fc66653a548922cac0cf1f8d809fbb8062e12430d7ab23a86d3614e3d052746ad8119e0ce3352fcecd4066201a30c0829
- SSDEEP 12288:JSvO2x9mONvKRwLSFtsOkx2LIa+ya5FAQjU/Liw:wvO2xJKRw2kOkx2LFRvcUV
- TLSH T161F45A31E241C03AD0A74576C6FA0BAFE564BD25531155CBA3C43A6A2FB36D2BE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-09-07_a7d4474e90ccbb26c5c9d89410e3f3db_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-07_a7d4474e90ccbb26c5c9d89410e3f3db_amadey_coinminer_elex_smoke-loader_stop
- Size 766KB
- SHA256 41410e29c55a683e1562d65fc8306427ff52c7e356c3368123b58c33349fd787
- MD5 a7d4474e90ccbb26c5c9d89410e3f3db
- SHA1 94917e1cc25a54a7728828ead740013abe39671c
- SHA512 008e5a32b53f2e31e1375264f6437d2fc66653a548922cac0cf1f8d809fbb8062e12430d7ab23a86d3614e3d052746ad8119e0ce3352fcecd4066201a30c0829
- SSDEEP 12288:JSvO2x9mONvKRwLSFtsOkx2LIa+ya5FAQjU/Liw:wvO2xJKRw2kOkx2LFRvcUV
- TLSH T161F45A31E241C03AD0A74576C6FA0BAFE564BD25531155CBA3C43A6A2FB36D2BE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Custom signature
UPX dump on OEP (original entry point)
Executes dropped EXE
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
Drops file in System32 directory