General
- Target 2026-11-10_6167cedfa940f8937e5b8ffc4f3189a7_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- Sample261110-jevapa1sbx
- SHA256 3c1842c87df8eb304a1c3c72b716670c5dee62859cfecc0a9b2b6d5115805334
- MD5 6167cedfa940f8937e5b8ffc4f3189a7
- SHA1 1eacb18b02ceda9c363bc4ab67a15aa564a50773
- SHA512 863ea9171f2b9bb09b8fbe9aef6ee3813a52d12fa9bd3c8270c65b4e01ea9a4f1f4639b095efb1b4edadfb34db90c69b8f983cf70686ebc6c50e045613cb7d03
- SSDEEP 6144:GWVrC1c2oonALgPLj7vf1LKlyIFVirGcEOkCybEaQRuy8K:GkCO2zVPX7vf1LKlIsOkxHy
- TLSH T1B6C47C29B690D076C4779574C4A197AAFAB1B432372449CFB3D00B5A1F237E2BA7530E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-11-10_6167cedfa940f8937e5b8ffc4f3189a7_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-10_6167cedfa940f8937e5b8ffc4f3189a7_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- SHA256 3c1842c87df8eb304a1c3c72b716670c5dee62859cfecc0a9b2b6d5115805334
- MD5 6167cedfa940f8937e5b8ffc4f3189a7
- SHA1 1eacb18b02ceda9c363bc4ab67a15aa564a50773
- SHA512 863ea9171f2b9bb09b8fbe9aef6ee3813a52d12fa9bd3c8270c65b4e01ea9a4f1f4639b095efb1b4edadfb34db90c69b8f983cf70686ebc6c50e045613cb7d03
- SSDEEP 6144:GWVrC1c2oonALgPLj7vf1LKlyIFVirGcEOkCybEaQRuy8K:GkCO2zVPX7vf1LKlIsOkxHy
- TLSH T1B6C47C29B690D076C4779574C4A197AAFAB1B432372449CFB3D00B5A1F237E2BA7530E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Custom signature
UPX dump on OEP (original entry point)
Executes dropped EXE
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
Drops file in System32 directory