General
- Target 2026-09-07_290644ded2575eb456f95343ea7086ea_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- Sample260909-fpca3sbm8z
- SHA256 2470d6332b0bb1dc3c72d95387cfe483a5946e3ef313091302d57f5e4d3d13e3
- MD5 290644ded2575eb456f95343ea7086ea
- SHA1 7093ac24a314ad42d44ade029aa013ee0ee13b25
- SHA512 3a6b9e0fa36cccc89c57a8e86094a06889089ce01d5731a2dfe6dc9135573e6891b41c43c9b47b268a6a9655e8e0dfe7995d1e330c75aac70685b8a84acfd6e0
- SSDEEP 6144:YcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:YSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T13BD45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-09-07_290644ded2575eb456f95343ea7086ea_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-07_290644ded2575eb456f95343ea7086ea_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- SHA256 2470d6332b0bb1dc3c72d95387cfe483a5946e3ef313091302d57f5e4d3d13e3
- MD5 290644ded2575eb456f95343ea7086ea
- SHA1 7093ac24a314ad42d44ade029aa013ee0ee13b25
- SHA512 3a6b9e0fa36cccc89c57a8e86094a06889089ce01d5731a2dfe6dc9135573e6891b41c43c9b47b268a6a9655e8e0dfe7995d1e330c75aac70685b8a84acfd6e0
- SSDEEP 6144:YcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:YSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T13BD45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory