General
- Target 2026-11-06_dee7532939c92d84a63d3d8cbfc46ede_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- Sample261107-zzd27sft5w
- SHA256 0a6a908134633221140a6c2b8bf36c22591282ec9e226a524900b7ee6bb3ff11
- MD5 dee7532939c92d84a63d3d8cbfc46ede
- SHA1 1c46d0f3224474eac9e4d2f561f862a5ac51addd
- SHA512 aaa461ce25d926cdcbeeaa8071207d23d86fe2a3d33df7650be3a7c148bb1eb93df96cc37e61dc7a12ec305cb2d701fffdcf500fba9f7478938bd5c1f792d3d0
- SSDEEP 6144:ocTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:oSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T153D45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-11-06_dee7532939c92d84a63d3d8cbfc46ede_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-06_dee7532939c92d84a63d3d8cbfc46ede_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- SHA256 0a6a908134633221140a6c2b8bf36c22591282ec9e226a524900b7ee6bb3ff11
- MD5 dee7532939c92d84a63d3d8cbfc46ede
- SHA1 1c46d0f3224474eac9e4d2f561f862a5ac51addd
- SHA512 aaa461ce25d926cdcbeeaa8071207d23d86fe2a3d33df7650be3a7c148bb1eb93df96cc37e61dc7a12ec305cb2d701fffdcf500fba9f7478938bd5c1f792d3d0
- SSDEEP 6144:ocTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:oSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T153D45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Custom signature
UPX dump on OEP (original entry point)
Executes dropped EXE
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
Drops file in System32 directory