General
- Target 2026-10-08_566296ca3a80756549dc4b52f8e6e90e_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- Sample261009-rt8evsyx2j
- SHA256 171ad0c703cfa145f8275af227905ef1bc72051b95a69bbb80a51160129c232b
- MD5 566296ca3a80756549dc4b52f8e6e90e
- SHA1 026168ba5a4cbb60e7879560e1fd4523b2edafe2
- SHA512 85a91fdc96c98ac39d9bf7dfbe3cce72b5bd26b7e06962d6f2c144ce9a92a46a69c1622cc0fe6b75b75c17e1c08d83de91679d47623db3ee9c946a1011cb002b
- SSDEEP 6144:JWVrC1c2oonALgPLj7vf1LKlyIFVirGcEOkCybEaQRuy8K:JkCO2zVPX7vf1LKlIsOkxHy
- TLSH T111C47C29B690D076C4779574C4A187AAFAB1B432372449CFB3D00B5A1F237E2BA7530E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-08_566296ca3a80756549dc4b52f8e6e90e_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-08_566296ca3a80756549dc4b52f8e6e90e_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- SHA256 171ad0c703cfa145f8275af227905ef1bc72051b95a69bbb80a51160129c232b
- MD5 566296ca3a80756549dc4b52f8e6e90e
- SHA1 026168ba5a4cbb60e7879560e1fd4523b2edafe2
- SHA512 85a91fdc96c98ac39d9bf7dfbe3cce72b5bd26b7e06962d6f2c144ce9a92a46a69c1622cc0fe6b75b75c17e1c08d83de91679d47623db3ee9c946a1011cb002b
- SSDEEP 6144:JWVrC1c2oonALgPLj7vf1LKlyIFVirGcEOkCybEaQRuy8K:JkCO2zVPX7vf1LKlIsOkxHy
- TLSH T111C47C29B690D076C4779574C4A187AAFAB1B432372449CFB3D00B5A1F237E2BA7530E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory