General
- Target 2026-11-11_6d478761b40440837eeaad7e8950ccc2_amadey_coinminer_elex_smoke-loader_stop
- Size 576KB
- Sample261113-mghlfsat2w
- SHA256 7c357fbb10e8c03cbbc49836a4433a4d337990af664b0468fd24c52f4d4a0f41
- MD5 6d478761b40440837eeaad7e8950ccc2
- SHA1 ec0dda9b7ecfe37f3609af81d01f7568b42e9594
- SHA512 25c8cc7fe21bf644959592f59918a41dfb3bf7017d2690cf793820824c8aa01578daef3c6f9a4efe77dc3efb7158bc9a81c3ed56c49c381a8772bba72d73c422
- SSDEEP 6144:fcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K/:fSvO2x9mONvKRwLSFtsOkx2LIa+yx
- TLSH T128C46D26B6908072C4779578C4A257AAFBB1BC2127204ACFA390775A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-11-11_6d478761b40440837eeaad7e8950ccc2_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-11_6d478761b40440837eeaad7e8950ccc2_amadey_coinminer_elex_smoke-loader_stop
- Size 576KB
- SHA256 7c357fbb10e8c03cbbc49836a4433a4d337990af664b0468fd24c52f4d4a0f41
- MD5 6d478761b40440837eeaad7e8950ccc2
- SHA1 ec0dda9b7ecfe37f3609af81d01f7568b42e9594
- SHA512 25c8cc7fe21bf644959592f59918a41dfb3bf7017d2690cf793820824c8aa01578daef3c6f9a4efe77dc3efb7158bc9a81c3ed56c49c381a8772bba72d73c422
- SSDEEP 6144:fcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K/:fSvO2x9mONvKRwLSFtsOkx2LIa+yx
- TLSH T128C46D26B6908072C4779578C4A257AAFBB1BC2127204ACFA390775A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Custom signature
UPX dump on OEP (original entry point)
Executes dropped EXE
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
Drops file in System32 directory