General
- Target 2026-09-10_0c0e82855abdcb1149a185fbe27c23ea_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- Sample260910-yymsaagl3s
- SHA256 c4e324516b479b5842ee1542564f22a6d156ad98cfcc8a3cd8bec32ed8bf8085
- MD5 0c0e82855abdcb1149a185fbe27c23ea
- SHA1 b3b3b7bf496aa2027f4f1f71c34fab81fcbca4a3
- SHA512 169734e1e91357381480107e4a77b78699cc7a477131c57604bd40b019da2e0ea648cf0e71d5471e89375c2cf69fe0e653f220ebaff76186698ec68d38cf900c
- SSDEEP 6144:q4ZaN1cb90oOTFmIFLq0cvnXhLCqj2EFNirGcEOkCybEaQRuy8K:qrNOb9+sIF+0cvnXhLCqEsOkxHy
- TLSH T1B5C48D29B6E0C076C4B79578C4A186B6FAB17832372459CFA394075A1F337E2BA3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-09-10_0c0e82855abdcb1149a185fbe27c23ea_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-10_0c0e82855abdcb1149a185fbe27c23ea_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- SHA256 c4e324516b479b5842ee1542564f22a6d156ad98cfcc8a3cd8bec32ed8bf8085
- MD5 0c0e82855abdcb1149a185fbe27c23ea
- SHA1 b3b3b7bf496aa2027f4f1f71c34fab81fcbca4a3
- SHA512 169734e1e91357381480107e4a77b78699cc7a477131c57604bd40b019da2e0ea648cf0e71d5471e89375c2cf69fe0e653f220ebaff76186698ec68d38cf900c
- SSDEEP 6144:q4ZaN1cb90oOTFmIFLq0cvnXhLCqj2EFNirGcEOkCybEaQRuy8K:qrNOb9+sIF+0cvnXhLCqEsOkxHy
- TLSH T1B5C48D29B6E0C076C4B79578C4A186B6FAB17832372459CFA394075A1F337E2BA3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory