General
- Target 2026-10-10_aaaa7be362540335f8d61c3ac253d327_amadey_coinminer_elex_smoke-loader_stop
- Size 766KB
- Sample261011-gp2reawybw
- SHA256 c3d81a60d86d43e2c3a7e0e49136cf1479e03295eb806b52d4528dab893610b6
- MD5 aaaa7be362540335f8d61c3ac253d327
- SHA1 f6dc931e0a05f8dc2a7985af437e0609936e0f6a
- SHA512 3724b10df99b5fecabd77b8c6643393646803e3d3045bf3ee06c31f8b2e87fece282e59716fed693acf4141babe0da47d0adac06b254dc3cf39c5deb763a24c5
- SSDEEP 12288:TSvO2x9mONvKRwLSFtsOkx2LIa+ya5FAQjU/Liw:mvO2xJKRw2kOkx2LFRvcUV
- TLSH T1D9F45A31E241C03AD0A74576C6FA0BAFE564BD25531155CBA3C43A6A2FB36D2BE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-10_aaaa7be362540335f8d61c3ac253d327_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-10_aaaa7be362540335f8d61c3ac253d327_amadey_coinminer_elex_smoke-loader_stop
- Size 766KB
- SHA256 c3d81a60d86d43e2c3a7e0e49136cf1479e03295eb806b52d4528dab893610b6
- MD5 aaaa7be362540335f8d61c3ac253d327
- SHA1 f6dc931e0a05f8dc2a7985af437e0609936e0f6a
- SHA512 3724b10df99b5fecabd77b8c6643393646803e3d3045bf3ee06c31f8b2e87fece282e59716fed693acf4141babe0da47d0adac06b254dc3cf39c5deb763a24c5
- SSDEEP 12288:TSvO2x9mONvKRwLSFtsOkx2LIa+ya5FAQjU/Liw:mvO2xJKRw2kOkx2LFRvcUV
- TLSH T1D9F45A31E241C03AD0A74576C6FA0BAFE564BD25531155CBA3C43A6A2FB36D2BE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory