General
- Target 2026-09-28_de86a281465abb047b0559a4776bbec8_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- Sample260928-nbfeksscnf
- SHA256 4b2812e660e39fe5e2becfb0766a8213459e36aa4b8f15791cdb05b612f678fc
- MD5 de86a281465abb047b0559a4776bbec8
- SHA1 ac7783179eb39ba8f669f752986cc08089b26ac2
- SHA512 3dd6b984820272578b51be32aa1a53afded87a205e000e0db01e68525b28d32ffbffa85635be4b012d57c8431a94e29bc6592f7ca601f5cd9f97fa4ab4f1d7ee
- SSDEEP 12288:WftONCx61vvGEYQFNEhyQU/lLi2IsOkxHy:gtONCTU/lmaOkxS
- TLSH T104C48E29B6E0C076C4B79574C4A186BAFAB17432372089CFA39407571F637D2BA3974E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-09-28_de86a281465abb047b0559a4776bbec8_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-28_de86a281465abb047b0559a4776bbec8_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- SHA256 4b2812e660e39fe5e2becfb0766a8213459e36aa4b8f15791cdb05b612f678fc
- MD5 de86a281465abb047b0559a4776bbec8
- SHA1 ac7783179eb39ba8f669f752986cc08089b26ac2
- SHA512 3dd6b984820272578b51be32aa1a53afded87a205e000e0db01e68525b28d32ffbffa85635be4b012d57c8431a94e29bc6592f7ca601f5cd9f97fa4ab4f1d7ee
- SSDEEP 12288:WftONCx61vvGEYQFNEhyQU/lLi2IsOkxHy:gtONCTU/lmaOkxS
- TLSH T104C48E29B6E0C076C4B79574C4A186BAFAB17432372089CFA39407571F637D2BA3974E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory