General
- Target 2026-09-07_290644ded2575eb456f95343ea7086ea_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- Sample260909-fpca3sbm8z
- SHA256 2470d6332b0bb1dc3c72d95387cfe483a5946e3ef313091302d57f5e4d3d13e3
- MD5 290644ded2575eb456f95343ea7086ea
- SHA1 7093ac24a314ad42d44ade029aa013ee0ee13b25
- SHA512 3a6b9e0fa36cccc89c57a8e86094a06889089ce01d5731a2dfe6dc9135573e6891b41c43c9b47b268a6a9655e8e0dfe7995d1e330c75aac70685b8a84acfd6e0
- SSDEEP 6144:YcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:YSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T13BD45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-09-07_290644ded2575eb456f95343ea7086ea_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-07_290644ded2575eb456f95343ea7086ea_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- SHA256 2470d6332b0bb1dc3c72d95387cfe483a5946e3ef313091302d57f5e4d3d13e3
- MD5 290644ded2575eb456f95343ea7086ea
- SHA1 7093ac24a314ad42d44ade029aa013ee0ee13b25
- SHA512 3a6b9e0fa36cccc89c57a8e86094a06889089ce01d5731a2dfe6dc9135573e6891b41c43c9b47b268a6a9655e8e0dfe7995d1e330c75aac70685b8a84acfd6e0
- SSDEEP 6144:YcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:YSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T13BD45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Custom signature
UPX dump on OEP (original entry point)
Executes dropped EXE
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
Drops file in System32 directory