General
- Target 2026-09-28_c0a42c404fe32beac435dbf03933a46d_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- Sample260928-pd27sstane
- SHA256 b2221ed546b0221387b4126f4c2552c79abad3f9c4e7714be89a5adc89d299a3
- MD5 c0a42c404fe32beac435dbf03933a46d
- SHA1 cdeaa3a011d99f17e1d433ffeec9c35907dded58
- SHA512 a868e48cf957a0f5d9c48b23a149df59ddd250a914e532043d3eda26ce02cc0a336acc2fd7176f9e622031c7497db7eae1adc80b75c79c9627f12691c181195d
- SSDEEP 6144:m6UE71cqQEoMr5C2iKLJChYSvL+8xPFxirGcEOkCybEaQRXr9HNdvOa+y8K:mO7OqQs42iKFChYSvL+8AsOkx2LIa+y
- TLSH T1D8C46C26B6A0D076C4B79574C4A28BA6FFB1742227244BCFA39047561F637E2BE3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-09-28_c0a42c404fe32beac435dbf03933a46d_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-28_c0a42c404fe32beac435dbf03933a46d_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- SHA256 b2221ed546b0221387b4126f4c2552c79abad3f9c4e7714be89a5adc89d299a3
- MD5 c0a42c404fe32beac435dbf03933a46d
- SHA1 cdeaa3a011d99f17e1d433ffeec9c35907dded58
- SHA512 a868e48cf957a0f5d9c48b23a149df59ddd250a914e532043d3eda26ce02cc0a336acc2fd7176f9e622031c7497db7eae1adc80b75c79c9627f12691c181195d
- SSDEEP 6144:m6UE71cqQEoMr5C2iKLJChYSvL+8xPFxirGcEOkCybEaQRXr9HNdvOa+y8K:mO7OqQs42iKFChYSvL+8AsOkx2LIa+y
- TLSH T1D8C46C26B6A0D076C4B79574C4A28BA6FFB1742227244BCFA39047561F637E2BE3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory