General
- Target 2026-11-09_598ea579ec8eb6b8a97e8e8fb677d6e4_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- Sample261110-xlcacaaa68
- SHA256 22206995b5eedee34e611c5bfa692fbf0e150959b90fa7164ea57c90672d4bbf
- MD5 598ea579ec8eb6b8a97e8e8fb677d6e4
- SHA1 a4f8b8b6c824aa8d25eef4342b18c58a0524fbd1
- SHA512 b3e0c3055a82a556214ee727d15274bad964abcd234f21b2462d57797b38e587d727a972cdb536c0c849b9567a7264115468bfd4c953bca21d795009cf60a785
- SSDEEP 6144:LcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:LSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T14AD45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-11-09_598ea579ec8eb6b8a97e8e8fb677d6e4_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-09_598ea579ec8eb6b8a97e8e8fb677d6e4_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- SHA256 22206995b5eedee34e611c5bfa692fbf0e150959b90fa7164ea57c90672d4bbf
- MD5 598ea579ec8eb6b8a97e8e8fb677d6e4
- SHA1 a4f8b8b6c824aa8d25eef4342b18c58a0524fbd1
- SHA512 b3e0c3055a82a556214ee727d15274bad964abcd234f21b2462d57797b38e587d727a972cdb536c0c849b9567a7264115468bfd4c953bca21d795009cf60a785
- SSDEEP 6144:LcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:LSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T14AD45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Custom signature
UPX dump on OEP (original entry point)
Executes dropped EXE
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
Drops file in System32 directory