General
- Target 2026-11-11_2800c9f3ea2e5b5a82028253a823dc8d_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- Sample261113-st7n1ac16w
- SHA256 89816b45727eb95c652616cd4b81776f90f94f60e7f1cd7e67424f62ebb29329
- MD5 2800c9f3ea2e5b5a82028253a823dc8d
- SHA1 bb36ea01840f1b9b315db2325339a063b0b76de6
- SHA512 72481b7d7d327888778f55ecbecaa952c3f04dbe362f33d8a7c2dc17196f99e794cd6c01dfc141ec452d5566737690d099d5199d0e20fa97773b491f0d9cc562
- SSDEEP 6144:a4ZaN1cb90oOTFmIFLq0cvnXhLCqj2EFNirGcEOkCybEaQRuy8K:arNOb9+sIF+0cvnXhLCqEsOkxHy
- TLSH T16DC48D29B6E0C076C4B79578C4A186B6FAB17832372459CFA394075A1F337E2BA3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-11-11_2800c9f3ea2e5b5a82028253a823dc8d_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-11_2800c9f3ea2e5b5a82028253a823dc8d_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- SHA256 89816b45727eb95c652616cd4b81776f90f94f60e7f1cd7e67424f62ebb29329
- MD5 2800c9f3ea2e5b5a82028253a823dc8d
- SHA1 bb36ea01840f1b9b315db2325339a063b0b76de6
- SHA512 72481b7d7d327888778f55ecbecaa952c3f04dbe362f33d8a7c2dc17196f99e794cd6c01dfc141ec452d5566737690d099d5199d0e20fa97773b491f0d9cc562
- SSDEEP 6144:a4ZaN1cb90oOTFmIFLq0cvnXhLCqj2EFNirGcEOkCybEaQRuy8K:arNOb9+sIF+0cvnXhLCqEsOkxHy
- TLSH T16DC48D29B6E0C076C4B79578C4A186B6FAB17832372459CFA394075A1F337E2BA3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Custom signature
UPX dump on OEP (original entry point)
Executes dropped EXE
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
Drops file in System32 directory