General
- Target 2026-09-23_c277f8b8e4ddde67f04652e6b74797c9_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- Sample260924-b64dnsbe45
- SHA256 9713e9e5cc2a3723365603d85780312659966ec22669a5136d65c15136a78882
- MD5 c277f8b8e4ddde67f04652e6b74797c9
- SHA1 0704ec4810f1d6c26bf8dfd201f4807def56b80f
- SHA512 a91c6062c4f54196eb98e81071a22161a2e9e891735d96a6a6ba12ce5626410fef1eb379f5d09771c053597838509890aa681812435b19a61e7bcee7c3e00a06
- SSDEEP 6144:pcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:pSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T1F2D45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-09-23_c277f8b8e4ddde67f04652e6b74797c9_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-23_c277f8b8e4ddde67f04652e6b74797c9_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- SHA256 9713e9e5cc2a3723365603d85780312659966ec22669a5136d65c15136a78882
- MD5 c277f8b8e4ddde67f04652e6b74797c9
- SHA1 0704ec4810f1d6c26bf8dfd201f4807def56b80f
- SHA512 a91c6062c4f54196eb98e81071a22161a2e9e891735d96a6a6ba12ce5626410fef1eb379f5d09771c053597838509890aa681812435b19a61e7bcee7c3e00a06
- SSDEEP 6144:pcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:pSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T1F2D45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory