General
- Target 2026-11-11_6ce4ce77352631d14586670598fa5d9f_amadey_coinminer_elex_smoke-loader_stop
- Size 766KB
- Sample261113-mg5e8aat3s
- SHA256 3e21f9a3e48b5eadde4fc87c8421f8523deb0232d33c721e8d5a376ff38ec5f4
- MD5 6ce4ce77352631d14586670598fa5d9f
- SHA1 f40891d0213fe9740cb03fe7ae9c594a801df004
- SHA512 b2a211c7c2d6a448e86ec1cfa279ba03297898a63d92b859c5823168527c3feac48feedd7f4b0bb8e9fd2b4ac0344c41dcad7d0426820152ed4f92bb137931ed
- SSDEEP 12288:XSvO2x9mONvKRwLSFtsOkx2LIa+ya5FAQjU/Liw:ivO2xJKRw2kOkx2LFRvcUV
- TLSH T11EF45A31E241C03AD0A74576C6FA0BAFE564BD25531155CBA3C43A6A2FB36D2BE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-11-11_6ce4ce77352631d14586670598fa5d9f_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-11_6ce4ce77352631d14586670598fa5d9f_amadey_coinminer_elex_smoke-loader_stop
- Size 766KB
- SHA256 3e21f9a3e48b5eadde4fc87c8421f8523deb0232d33c721e8d5a376ff38ec5f4
- MD5 6ce4ce77352631d14586670598fa5d9f
- SHA1 f40891d0213fe9740cb03fe7ae9c594a801df004
- SHA512 b2a211c7c2d6a448e86ec1cfa279ba03297898a63d92b859c5823168527c3feac48feedd7f4b0bb8e9fd2b4ac0344c41dcad7d0426820152ed4f92bb137931ed
- SSDEEP 12288:XSvO2x9mONvKRwLSFtsOkx2LIa+ya5FAQjU/Liw:ivO2xJKRw2kOkx2LFRvcUV
- TLSH T11EF45A31E241C03AD0A74576C6FA0BAFE564BD25531155CBA3C43A6A2FB36D2BE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Custom signature
UPX dump on OEP (original entry point)
Executes dropped EXE
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
Drops file in System32 directory