General
- Target 2026-09-30_b2e68b693eea5888ce9fa4f5bf1154a3_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- Sample261001-jkr3hsvx7m
- SHA256 ac4b6507090cfa79e4cf804798b7ac00137bdc43cbc424f27cccd961c92a0519
- MD5 b2e68b693eea5888ce9fa4f5bf1154a3
- SHA1 e5ee12f2e83fe4cc87a5b8fca4a397d54a87bcdc
- SHA512 ed4934c98609ee0e5f2bb95f3942805f684291947f97b1513b8b68c1e747e98ed428c319ab0d8df87ec6c4f7abb279a2bf1daa81d7ce52fcf749e413001c83d9
- SSDEEP 6144:345aN1cnZ0ouTlJV/LbuUcCMBLCKqkFtirGcEOkCybEaQRXr9HNdvOa+y8K:3LNOnZezl3uUcCMBLCKksOkx2LIa+y
- TLSH T1F5C47D2AB6A0D076C4779574C4A257A6FFB1B42137204ACFA390875A1F237E2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-09-30_b2e68b693eea5888ce9fa4f5bf1154a3_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-30_b2e68b693eea5888ce9fa4f5bf1154a3_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- SHA256 ac4b6507090cfa79e4cf804798b7ac00137bdc43cbc424f27cccd961c92a0519
- MD5 b2e68b693eea5888ce9fa4f5bf1154a3
- SHA1 e5ee12f2e83fe4cc87a5b8fca4a397d54a87bcdc
- SHA512 ed4934c98609ee0e5f2bb95f3942805f684291947f97b1513b8b68c1e747e98ed428c319ab0d8df87ec6c4f7abb279a2bf1daa81d7ce52fcf749e413001c83d9
- SSDEEP 6144:345aN1cnZ0ouTlJV/LbuUcCMBLCKqkFtirGcEOkCybEaQRXr9HNdvOa+y8K:3LNOnZezl3uUcCMBLCKksOkx2LIa+y
- TLSH T1F5C47D2AB6A0D076C4779574C4A257A6FFB1B42137204ACFA390875A1F237E2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory