General
- Target 2026-10-01_42175fedc1895e67e42f1584ad429ba7_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- Sample261002-tc6aaade78
- SHA256 03108bbd546b661e2e8aec3303999b1d662201b1ad765e581f0961fc020b00d1
- MD5 42175fedc1895e67e42f1584ad429ba7
- SHA1 ecebf117b6a525c2ff93f38604b2e8c2f4ead9f7
- SHA512 4aee5ce4bb185833c46028a2c4057cc9bdf125ff1810032a59defd718b21261969d2bf6d4cdb84184c7b8c2bf0364a2a553a5d31ccd50b662c6304287455c971
- SSDEEP 6144:BUJJuV1cdhIoA7vJ0CLoCgvDLe4AmFvirGcEOkCybEaQRuy8K:BYsVOdhElvkCgvDLe4usOkxHy
- TLSH T130C48D29B6D0C036C5B39574C4A186BAEAB17432372549CFA3D5475A0F337E2BA7930E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-01_42175fedc1895e67e42f1584ad429ba7_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-01_42175fedc1895e67e42f1584ad429ba7_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- SHA256 03108bbd546b661e2e8aec3303999b1d662201b1ad765e581f0961fc020b00d1
- MD5 42175fedc1895e67e42f1584ad429ba7
- SHA1 ecebf117b6a525c2ff93f38604b2e8c2f4ead9f7
- SHA512 4aee5ce4bb185833c46028a2c4057cc9bdf125ff1810032a59defd718b21261969d2bf6d4cdb84184c7b8c2bf0364a2a553a5d31ccd50b662c6304287455c971
- SSDEEP 6144:BUJJuV1cdhIoA7vJ0CLoCgvDLe4AmFvirGcEOkCybEaQRuy8K:BYsVOdhElvkCgvDLe4usOkxHy
- TLSH T130C48D29B6D0C036C5B39574C4A186BAEAB17432372549CFA3D5475A0F337E2BA7930E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory