General
- Target 2026-11-01_f594c291e756f093c46a0434c2d895a0_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- Sample261102-de79naea32
- SHA256 adf92ce1e0e4f7231be2b51b558286a2682a2364259bf243bd01df636a9c7288
- MD5 f594c291e756f093c46a0434c2d895a0
- SHA1 6d61d75e9a2bca48d4723ff53a3aea9954121c81
- SHA512 279ff84bb0eb92dc989e815a94e77932e646580b8a35eb76091920372cb6e856cb9c5010cd851756e9789e1875265f2d33b8e5975809362656953450873da8b0
- SSDEEP 6144:iWVrC1c2oonALgPLj7vf1LKlyIFVirGcEOkCybEaQRuy8K:ikCO2zVPX7vf1LKlIsOkxHy
- TLSH T1EBC47C29B690D076C4779574C4A197AAFAB1B432372449CFB3D00B5A1F237E2BA7530E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-11-01_f594c291e756f093c46a0434c2d895a0_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-01_f594c291e756f093c46a0434c2d895a0_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- SHA256 adf92ce1e0e4f7231be2b51b558286a2682a2364259bf243bd01df636a9c7288
- MD5 f594c291e756f093c46a0434c2d895a0
- SHA1 6d61d75e9a2bca48d4723ff53a3aea9954121c81
- SHA512 279ff84bb0eb92dc989e815a94e77932e646580b8a35eb76091920372cb6e856cb9c5010cd851756e9789e1875265f2d33b8e5975809362656953450873da8b0
- SSDEEP 6144:iWVrC1c2oonALgPLj7vf1LKlyIFVirGcEOkCybEaQRuy8K:ikCO2zVPX7vf1LKlIsOkxHy
- TLSH T1EBC47C29B690D076C4779574C4A197AAFAB1B432372449CFB3D00B5A1F237E2BA7530E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory