General
- Target 2026-09-12_1aa50d4bf6dfbbae81d0ac07ff653b0c_amadey_coinminer_elex_smoke-loader_stop
- Size 576KB
- Sample260913-gdzsnsscka
- SHA256 38567460176be5f205aa557a71be4a0dd5e07dbd089f73146a22f0a58bef165d
- MD5 1aa50d4bf6dfbbae81d0ac07ff653b0c
- SHA1 f77964fcee6815cae072bb575ad42e87ffbc1b7d
- SHA512 d741a4a7dc7e9e7bec65725190e864072766a7beea5a9094242eb59c18b7e7065b7e35dbc2d7a524d56c4b9f7fad938b9ff1aa81b2dc3095d6903258b3a89ca6
- SSDEEP 6144:GcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K/:GSvO2x9mONvKRwLSFtsOkx2LIa+yx
- TLSH T168C46D26B6908072C4779578C4A257AAFBB1BC2127204ACFA390775A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-09-12_1aa50d4bf6dfbbae81d0ac07ff653b0c_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-12_1aa50d4bf6dfbbae81d0ac07ff653b0c_amadey_coinminer_elex_smoke-loader_stop
- Size 576KB
- SHA256 38567460176be5f205aa557a71be4a0dd5e07dbd089f73146a22f0a58bef165d
- MD5 1aa50d4bf6dfbbae81d0ac07ff653b0c
- SHA1 f77964fcee6815cae072bb575ad42e87ffbc1b7d
- SHA512 d741a4a7dc7e9e7bec65725190e864072766a7beea5a9094242eb59c18b7e7065b7e35dbc2d7a524d56c4b9f7fad938b9ff1aa81b2dc3095d6903258b3a89ca6
- SSDEEP 6144:GcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K/:GSvO2x9mONvKRwLSFtsOkx2LIa+yx
- TLSH T168C46D26B6908072C4779578C4A257AAFBB1BC2127204ACFA390775A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory