General
- Target 2026-09-08_23b80bb0d405b8dc2a8d5ec26c1d552f_amadey_coinminer_elex_smoke-loader_stop
- Size 638KB
- Sample260910-hrzv9ssway
- SHA256 eb61410c935a46fb224b7fadeca32ef42b2b4f9c19aea791653b7b12690b3e00
- MD5 23b80bb0d405b8dc2a8d5ec26c1d552f
- SHA1 5d09c181d7d764e48b603c0b222ff6b4faf86a5c
- SHA512 fd0e8b0ab57b070f014830015e669c242312e622cec5f9c28296f6b501f76106e4452d92e876f78290ad52c77b5326cfb9e2a768685ee1771a397eff66a577d0
- SSDEEP 6144:CcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8KU5R2:CSvO2x9mONvKRwLSFtsOkx2LIa+ya5g
- TLSH T1B9D46B26B6908037C0B74675C5B64BAAFAB5BC21631186CFA380761A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-09-08_23b80bb0d405b8dc2a8d5ec26c1d552f_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-08_23b80bb0d405b8dc2a8d5ec26c1d552f_amadey_coinminer_elex_smoke-loader_stop
- Size 638KB
- SHA256 eb61410c935a46fb224b7fadeca32ef42b2b4f9c19aea791653b7b12690b3e00
- MD5 23b80bb0d405b8dc2a8d5ec26c1d552f
- SHA1 5d09c181d7d764e48b603c0b222ff6b4faf86a5c
- SHA512 fd0e8b0ab57b070f014830015e669c242312e622cec5f9c28296f6b501f76106e4452d92e876f78290ad52c77b5326cfb9e2a768685ee1771a397eff66a577d0
- SSDEEP 6144:CcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8KU5R2:CSvO2x9mONvKRwLSFtsOkx2LIa+ya5g
- TLSH T1B9D46B26B6908037C0B74675C5B64BAAFAB5BC21631186CFA380761A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory