General
- Target 2026-11-11_1bd5d2be2f584ac3d91b3070ffced965_amadey_coinminer_elex_smoke-loader_stop
- Size 761KB
- Sample261113-txchpsdx6j
- SHA256 55402e8a1778ae460cd7217bbe8b4eacc2d2bcdd41729a13e7ce9e4df533f6b7
- MD5 1bd5d2be2f584ac3d91b3070ffced965
- SHA1 73d6fabc04ad5edd2f30c220d65f367ff8ea2e71
- SHA512 cd29f5d92f645c87446ff6d971f0cb615e0ad54a677ed79fe9a4d69fa906466a76cdd15698c345a8aab43b34ee5eea15d2be119599324269c011769aab5d73d1
- SSDEEP 12288:FSvO2x9mONvKRwLSFtsOkxHya5hYIW0p98B:kvO2xJKRw2kOkxSkW298B
- TLSH T1B3F49E35A2808036C0B34532C6F94AABF9797D35631565CBA3843B662F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-11-11_1bd5d2be2f584ac3d91b3070ffced965_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-11_1bd5d2be2f584ac3d91b3070ffced965_amadey_coinminer_elex_smoke-loader_stop
- Size 761KB
- SHA256 55402e8a1778ae460cd7217bbe8b4eacc2d2bcdd41729a13e7ce9e4df533f6b7
- MD5 1bd5d2be2f584ac3d91b3070ffced965
- SHA1 73d6fabc04ad5edd2f30c220d65f367ff8ea2e71
- SHA512 cd29f5d92f645c87446ff6d971f0cb615e0ad54a677ed79fe9a4d69fa906466a76cdd15698c345a8aab43b34ee5eea15d2be119599324269c011769aab5d73d1
- SSDEEP 12288:FSvO2x9mONvKRwLSFtsOkxHya5hYIW0p98B:kvO2xJKRw2kOkxSkW298B
- TLSH T1B3F49E35A2808036C0B34532C6F94AABF9797D35631565CBA3843B662F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Custom signature
UPX dump on OEP (original entry point)
Executes dropped EXE
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
Drops file in System32 directory