General
- Target 2026-10-01_3bf98c294e336136ee17b8aaa2672820_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- Sample261002-tt2y7aea82
- SHA256 a34e72566ceca7a2b57f78be7aa2cc90eaaac0071a317dc461adcacb433376ca
- MD5 3bf98c294e336136ee17b8aaa2672820
- SHA1 9f14832b0c9e0139c9ca5163d4c5bb76e0588646
- SHA512 6e95ba0b89c5c1a68f4be09457536cb054019ba6ffa078a762c75fe9628a22bd41657d855ccfbbeb32388c6e0da658030e370cf653e484d8ca573097e8b3a5f9
- SSDEEP 6144:Qgye71cE4poJTqvpQLXNKFyLWD1nFairGcEOkCybEaQRuy8K:QI7OE4kopQzNKFyLWDHsOkxHy
- TLSH T1D7C48C2AB690C076C4B7D534C5E197AAEAB17432372449CFA7D0075A1F237E2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-01_3bf98c294e336136ee17b8aaa2672820_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-01_3bf98c294e336136ee17b8aaa2672820_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- SHA256 a34e72566ceca7a2b57f78be7aa2cc90eaaac0071a317dc461adcacb433376ca
- MD5 3bf98c294e336136ee17b8aaa2672820
- SHA1 9f14832b0c9e0139c9ca5163d4c5bb76e0588646
- SHA512 6e95ba0b89c5c1a68f4be09457536cb054019ba6ffa078a762c75fe9628a22bd41657d855ccfbbeb32388c6e0da658030e370cf653e484d8ca573097e8b3a5f9
- SSDEEP 6144:Qgye71cE4poJTqvpQLXNKFyLWD1nFairGcEOkCybEaQRuy8K:QI7OE4kopQzNKFyLWDHsOkxHy
- TLSH T1D7C48C2AB690C076C4B7D534C5E197AAEAB17432372449CFA7D0075A1F237E2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory