General
- Target 2026-10-10_bd93f40cd47ef2ade3550dda541d3f04_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- Sample261011-ebwl5aex5s
- SHA256 fe6934b194645af89a2458b36c2423c97eba7866c0db7f9cf49e08468d7f4cea
- MD5 bd93f40cd47ef2ade3550dda541d3f04
- SHA1 8fb261da6c32190afbb5f4fb51b91c82187b8273
- SHA512 193b08b54f4711bce365814bca337fdad43daa474f189d9cef0524daa1b76940fbd5b1b3cf70ef7dc6ed2c90ff33b11472d4b7f9539bfd3a83b00664b7072176
- SSDEEP 6144:GUkCH1ca98ozbshiLlbyBkjpLKRW4pF0irGcEOkCybEaQRXr9HNdvOa+y8K:G2HOa9bAixbyBk9LKRWgsOkx2LIa+y
- TLSH T17AC47D2AB6A08077C4B79578C49286A6FFB1743137204ADFA390475A1F237E2BE3571D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-10_bd93f40cd47ef2ade3550dda541d3f04_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-10_bd93f40cd47ef2ade3550dda541d3f04_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- SHA256 fe6934b194645af89a2458b36c2423c97eba7866c0db7f9cf49e08468d7f4cea
- MD5 bd93f40cd47ef2ade3550dda541d3f04
- SHA1 8fb261da6c32190afbb5f4fb51b91c82187b8273
- SHA512 193b08b54f4711bce365814bca337fdad43daa474f189d9cef0524daa1b76940fbd5b1b3cf70ef7dc6ed2c90ff33b11472d4b7f9539bfd3a83b00664b7072176
- SSDEEP 6144:GUkCH1ca98ozbshiLlbyBkjpLKRW4pF0irGcEOkCybEaQRXr9HNdvOa+y8K:G2HOa9bAixbyBk9LKRWgsOkx2LIa+y
- TLSH T17AC47D2AB6A08077C4B79578C49286A6FFB1743137204ADFA390475A1F237E2BE3571D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory