General
- Target 2026-11-11_6823d88aeb1e040408c9d2f57ae94367_amadey_coinminer_elex_smoke-loader_stop
- Size 761KB
- Sample261113-mtkataat91
- SHA256 4623b8e9048431a6cda1dd2ea2a3842c2b0b645374daf37e9fad8692ff436efc
- MD5 6823d88aeb1e040408c9d2f57ae94367
- SHA1 e5c0ba0973b4a9af04b5b03c19a38511968c8714
- SHA512 b562d1505a6d3b9c862db199d5b0759c468631809b21f4408251e0d35abde52da0636491dd5e32bd257d99e720c2ccc7ba9ade94c9833c9ab0d489d012915450
- SSDEEP 12288:/SvO2x9mONvKRwLSFtsOkxHya5hYIW0p98B:KvO2xJKRw2kOkxSkW298B
- TLSH T111F49E35A2808036C0B34532C6F94AABF9797D35631565CBA3843B662F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-11-11_6823d88aeb1e040408c9d2f57ae94367_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-11_6823d88aeb1e040408c9d2f57ae94367_amadey_coinminer_elex_smoke-loader_stop
- Size 761KB
- SHA256 4623b8e9048431a6cda1dd2ea2a3842c2b0b645374daf37e9fad8692ff436efc
- MD5 6823d88aeb1e040408c9d2f57ae94367
- SHA1 e5c0ba0973b4a9af04b5b03c19a38511968c8714
- SHA512 b562d1505a6d3b9c862db199d5b0759c468631809b21f4408251e0d35abde52da0636491dd5e32bd257d99e720c2ccc7ba9ade94c9833c9ab0d489d012915450
- SSDEEP 12288:/SvO2x9mONvKRwLSFtsOkxHya5hYIW0p98B:KvO2xJKRw2kOkxSkW298B
- TLSH T111F49E35A2808036C0B34532C6F94AABF9797D35631565CBA3843B662F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Custom signature
UPX dump on OEP (original entry point)
Executes dropped EXE
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
Drops file in System32 directory