General
- Target 2026-10-01_8262697b5e3af5d957e3252b1482a393_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- Sample261002-mble6axs5j
- SHA256 a8e3eb40c6ead012fc39687ceedcd44adda884b71f3dceb1ca2472801a56f833
- MD5 8262697b5e3af5d957e3252b1482a393
- SHA1 572e4dc1be0d1f78b1004e2c2ee5fd8d114aba22
- SHA512 3e5a998c9745e9d319e447f70ec9d386b6a811326494372aa603ec2bb4e81b949637bb568b98ee428016ef7e463836eed2c89b87c5f91c8dcaf29769a3d187b8
- SSDEEP 6144:DUJJuV1cdhIoA7vJ0CLoCgvDLe4AmFvirGcEOkCybEaQRuy8K:DYsVOdhElvkCgvDLe4usOkxHy
- TLSH T1C5C48D29B6D0C036C5B39574C4A186BAEAB17432372549CFA3D5475A0F337E2BA7930E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-01_8262697b5e3af5d957e3252b1482a393_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-01_8262697b5e3af5d957e3252b1482a393_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- SHA256 a8e3eb40c6ead012fc39687ceedcd44adda884b71f3dceb1ca2472801a56f833
- MD5 8262697b5e3af5d957e3252b1482a393
- SHA1 572e4dc1be0d1f78b1004e2c2ee5fd8d114aba22
- SHA512 3e5a998c9745e9d319e447f70ec9d386b6a811326494372aa603ec2bb4e81b949637bb568b98ee428016ef7e463836eed2c89b87c5f91c8dcaf29769a3d187b8
- SSDEEP 6144:DUJJuV1cdhIoA7vJ0CLoCgvDLe4AmFvirGcEOkCybEaQRuy8K:DYsVOdhElvkCgvDLe4usOkxHy
- TLSH T1C5C48D29B6D0C036C5B39574C4A186BAEAB17432372549CFA3D5475A0F337E2BA7930E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory