General
- Target 2026-09-08_36d728c3024995837c87c1e57643ab43_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- Sample260910-g83g2sstgt
- SHA256 2f6e4be706cf64988fd7a4143a5530b09054fff858c43b884717580cf8b7ae4e
- MD5 36d728c3024995837c87c1e57643ab43
- SHA1 1363eaf5dee3bb134cf0ddf340148bed50635b4b
- SHA512 8eb985db662c5943b2a3fb32ce5f79100d1811669260315dcb5b99464d9156c94df0db531de597780d887248632c49209044baa71011e161785244ba07f025d6
- SSDEEP 6144:HUJJuV1cdhIoA7vJ0CLoCgvDLe4AmFvirGcEOkCybEaQRuy8K:HYsVOdhElvkCgvDLe4usOkxHy
- TLSH T18AC48D29B6D0C036C5B39574C4A186BAEAB17432372549CFA3D5475A0F337E2BA7930E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-09-08_36d728c3024995837c87c1e57643ab43_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-08_36d728c3024995837c87c1e57643ab43_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- SHA256 2f6e4be706cf64988fd7a4143a5530b09054fff858c43b884717580cf8b7ae4e
- MD5 36d728c3024995837c87c1e57643ab43
- SHA1 1363eaf5dee3bb134cf0ddf340148bed50635b4b
- SHA512 8eb985db662c5943b2a3fb32ce5f79100d1811669260315dcb5b99464d9156c94df0db531de597780d887248632c49209044baa71011e161785244ba07f025d6
- SSDEEP 6144:HUJJuV1cdhIoA7vJ0CLoCgvDLe4AmFvirGcEOkCybEaQRuy8K:HYsVOdhElvkCgvDLe4usOkxHy
- TLSH T18AC48D29B6D0C036C5B39574C4A186BAEAB17432372549CFA3D5475A0F337E2BA7930E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory