General
- Target 2026-10-06_905db0c3e78a8694b0f4d9e5322ea6ac_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- Sample261007-3f2kyaxtgv
- SHA256 cc010715ee1d7c3e9a2c4563a4e3c89d32d057f2c2a2ba31c792fe8519711bf7
- MD5 905db0c3e78a8694b0f4d9e5322ea6ac
- SHA1 962913d9a032ac8f37def71a2da19f4140d8ab27
- SHA512 e7ea7e455f752648d49520c8d1807dcc7c6e94f50519ccd4ba6f5eca3d59d1e2164531a7de685f6233048701412cb8cb28c28dc4d2990175c4ca7e39c3c71bb9
- SSDEEP 6144:dWVrC1c2oonALgPLj7vf1LKlyIFVirGcEOkCybEaQRXr9HNdvOa+y8K:dkCO2zVPX7vf1LKlIsOkx2LIa+y
- TLSH T15CC47C2AF6A0C036C4779574C4A257AAFFB1B42127204ACFA390475A1F637E2BE7531D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-06_905db0c3e78a8694b0f4d9e5322ea6ac_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-06_905db0c3e78a8694b0f4d9e5322ea6ac_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- SHA256 cc010715ee1d7c3e9a2c4563a4e3c89d32d057f2c2a2ba31c792fe8519711bf7
- MD5 905db0c3e78a8694b0f4d9e5322ea6ac
- SHA1 962913d9a032ac8f37def71a2da19f4140d8ab27
- SHA512 e7ea7e455f752648d49520c8d1807dcc7c6e94f50519ccd4ba6f5eca3d59d1e2164531a7de685f6233048701412cb8cb28c28dc4d2990175c4ca7e39c3c71bb9
- SSDEEP 6144:dWVrC1c2oonALgPLj7vf1LKlyIFVirGcEOkCybEaQRXr9HNdvOa+y8K:dkCO2zVPX7vf1LKlIsOkx2LIa+y
- TLSH T15CC47C2AF6A0C036C4779574C4A257AAFFB1B42127204ACFA390475A1F637E2BE7531D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory