General
- Target 2026-11-09_ca4d4f4ccacb56dbf541f36142960ffa_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- Sample261110-mqfhfsssdx
- SHA256 8c0e87e8c0770ad7f9a54753c6e17dab5798efa038c775d59facedd3a91c38ad
- MD5 ca4d4f4ccacb56dbf541f36142960ffa
- SHA1 1ea6a29ac9c5f896ee316365ec07364d75104237
- SHA512 06cdb51c8fd1b6aecfa93592304b7901b26e3cf28ce8cb028e2d990c4443788f1021eca1374e36abff459360bed4e38a5ab1a65d0770a1c86f8adbbe79cdfc83
- SSDEEP 6144:CUJJuV1cdhIoA7vJ0CLoCgvDLe4AmFvirGcEOkCybEaQRuy8K:CYsVOdhElvkCgvDLe4usOkxHy
- TLSH T146C48D29B6D0C036C5B39574C4A186BAEAB17432372549CFA3D5475A0F337E2BA7930E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-11-09_ca4d4f4ccacb56dbf541f36142960ffa_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-09_ca4d4f4ccacb56dbf541f36142960ffa_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- SHA256 8c0e87e8c0770ad7f9a54753c6e17dab5798efa038c775d59facedd3a91c38ad
- MD5 ca4d4f4ccacb56dbf541f36142960ffa
- SHA1 1ea6a29ac9c5f896ee316365ec07364d75104237
- SHA512 06cdb51c8fd1b6aecfa93592304b7901b26e3cf28ce8cb028e2d990c4443788f1021eca1374e36abff459360bed4e38a5ab1a65d0770a1c86f8adbbe79cdfc83
- SSDEEP 6144:CUJJuV1cdhIoA7vJ0CLoCgvDLe4AmFvirGcEOkCybEaQRuy8K:CYsVOdhElvkCgvDLe4usOkxHy
- TLSH T146C48D29B6D0C036C5B39574C4A186BAEAB17432372549CFA3D5475A0F337E2BA7930E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Custom signature
UPX dump on OEP (original entry point)
Executes dropped EXE
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
Drops file in System32 directory