General
- Target 2026-11-01_9113433627eb2f6a1ba8851f66f51590_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- Sample261102-r757navses
- SHA256 98c739c543ae128f051104ae4ef9c66e15a31e53c4855a1d404d357ddcb5cc2b
- MD5 9113433627eb2f6a1ba8851f66f51590
- SHA1 c2caf119afaf3721dc586a5cfcad4415c8bcbe31
- SHA512 bdf3a910d8f17be8eb4c265a6b39d926eb81b4aca8d875a07d6b0c0254c3ef9926cb3392fc34049982ca21b37dcbec5f890fa24e85a4e96487c797969f5f0f1c
- SSDEEP 6144:HcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:HSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T152D45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-11-01_9113433627eb2f6a1ba8851f66f51590_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-01_9113433627eb2f6a1ba8851f66f51590_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- SHA256 98c739c543ae128f051104ae4ef9c66e15a31e53c4855a1d404d357ddcb5cc2b
- MD5 9113433627eb2f6a1ba8851f66f51590
- SHA1 c2caf119afaf3721dc586a5cfcad4415c8bcbe31
- SHA512 bdf3a910d8f17be8eb4c265a6b39d926eb81b4aca8d875a07d6b0c0254c3ef9926cb3392fc34049982ca21b37dcbec5f890fa24e85a4e96487c797969f5f0f1c
- SSDEEP 6144:HcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:HSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T152D45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory