General
- Target 2026-09-09_d6e67607164bb88aed4d338d9d491b2f_amadey_coinminer_elex_smoke-loader_stop
- Size 638KB
- Sample260910-2w85aahp4t
- SHA256 550668be1e08957b699f4e200818f981b6f9401b320d1f38514417e4ec1b72cc
- MD5 d6e67607164bb88aed4d338d9d491b2f
- SHA1 46c97d289244fe65923aca9a56b7eda4e7188b44
- SHA512 5fcdaa1263c555e653b35dd36bbfee5e6f68137e255e99a24b65b00bf28928e45f463830e4e5dcca91171cf3de6fe95abd3bc627968226e99662cd4bc1b7cf39
- SSDEEP 6144:/cTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8KU5R2:/SvO2x9mONvKRwLSFtsOkx2LIa+ya5g
- TLSH T1D9D46B26B6908037C0B74675C5B64BAAFAB5BC21631186CFA380761A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-09-09_d6e67607164bb88aed4d338d9d491b2f_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-09_d6e67607164bb88aed4d338d9d491b2f_amadey_coinminer_elex_smoke-loader_stop
- Size 638KB
- SHA256 550668be1e08957b699f4e200818f981b6f9401b320d1f38514417e4ec1b72cc
- MD5 d6e67607164bb88aed4d338d9d491b2f
- SHA1 46c97d289244fe65923aca9a56b7eda4e7188b44
- SHA512 5fcdaa1263c555e653b35dd36bbfee5e6f68137e255e99a24b65b00bf28928e45f463830e4e5dcca91171cf3de6fe95abd3bc627968226e99662cd4bc1b7cf39
- SSDEEP 6144:/cTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8KU5R2:/SvO2x9mONvKRwLSFtsOkx2LIa+ya5g
- TLSH T1D9D46B26B6908037C0B74675C5B64BAAFAB5BC21631186CFA380761A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory