General
- Target 2026-09-08_eb088a91c41f611e3e9f20b42925ec65_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- Sample260910-cc49jstcqf
- SHA256 2545bf6bccc54bbe1a071cdf1c26363c297ec10ab75f52d9550848767c80a449
- MD5 eb088a91c41f611e3e9f20b42925ec65
- SHA1 433da022a170a6427a7b38258600a30ea41795a7
- SHA512 71b0baa2099ec573fa6034f86f84727c3a5a306f4dfd1c5fbbc5d0f6c3e401f64bd3748a6ee2c45906ecf6eb722e2a1ce2d4de82dc812f2121feafbffb18b541
- SSDEEP 6144:ggye71cE4poJTqvpQLXNKFyLWD1nFairGcEOkCybEaQRuy8K:gI7OE4kopQzNKFyLWDHsOkxHy
- TLSH T19EC48C2AB690C076C4B7D534C5E197AAEAB17432372449CFA3D0075A1F237E2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-09-08_eb088a91c41f611e3e9f20b42925ec65_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-08_eb088a91c41f611e3e9f20b42925ec65_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- SHA256 2545bf6bccc54bbe1a071cdf1c26363c297ec10ab75f52d9550848767c80a449
- MD5 eb088a91c41f611e3e9f20b42925ec65
- SHA1 433da022a170a6427a7b38258600a30ea41795a7
- SHA512 71b0baa2099ec573fa6034f86f84727c3a5a306f4dfd1c5fbbc5d0f6c3e401f64bd3748a6ee2c45906ecf6eb722e2a1ce2d4de82dc812f2121feafbffb18b541
- SSDEEP 6144:ggye71cE4poJTqvpQLXNKFyLWD1nFairGcEOkCybEaQRuy8K:gI7OE4kopQzNKFyLWDHsOkxHy
- TLSH T19EC48C2AB690C076C4B7D534C5E197AAEAB17432372449CFA3D0075A1F237E2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory