General
- Target 2026-11-01_e6387828cd450db10dfbec032bfd9318_amadey_coinminer_elex_smoke-loader_stop
- Size 525KB
- Sample261102-fsf4fasx4l
- SHA256 e0b2f9a77acd27bdcc4bc04fc17c24fc663b2957974ffa03aec48e490294df83
- MD5 e6387828cd450db10dfbec032bfd9318
- SHA1 40d70f7d70552089f7214f379956d71e58e5ca29
- SHA512 f54782161bed8131608b52e9995c1562daa4ad94ca403394aa257c19fd93daca7e288169e88b58c800f362039fcdd44e01f92654c1f28e33bdbc6ca8866f65d3
- SSDEEP 6144:ncTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K:nSvO2x9mONvKRwLSFtsOkx2LIa+y
- TLSH T173B47D2AB6A0D076C4779579C4A257BAFBB1742137204ACFA390475A1F237E2BE3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-11-01_e6387828cd450db10dfbec032bfd9318_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-01_e6387828cd450db10dfbec032bfd9318_amadey_coinminer_elex_smoke-loader_stop
- Size 525KB
- SHA256 e0b2f9a77acd27bdcc4bc04fc17c24fc663b2957974ffa03aec48e490294df83
- MD5 e6387828cd450db10dfbec032bfd9318
- SHA1 40d70f7d70552089f7214f379956d71e58e5ca29
- SHA512 f54782161bed8131608b52e9995c1562daa4ad94ca403394aa257c19fd93daca7e288169e88b58c800f362039fcdd44e01f92654c1f28e33bdbc6ca8866f65d3
- SSDEEP 6144:ncTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K:nSvO2x9mONvKRwLSFtsOkx2LIa+y
- TLSH T173B47D2AB6A0D076C4779579C4A257BAFBB1742137204ACFA390475A1F237E2BE3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Custom signature
UPX dump on OEP (original entry point)
Executes dropped EXE
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
Drops file in System32 directory