General
- Target 2026-10-10_44d1c435021021e9bd26e722383e1dbd_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- Sample261011-s3p6batvbw
- SHA256 4d48212b02a18df2b36e021849ae1f819858b68225ffcc14bfc786cd258b4f66
- MD5 44d1c435021021e9bd26e722383e1dbd
- SHA1 1fbf38cbb9d340539a0170c791c7caf914aacb2d
- SHA512 a64e5bf60df272748a0f15f1699253b483e3a705a4d76d0bac50a5e3658039ce76a855458fbb8d1112f5ef0d34b17894565795f93f06c4485b29c8fbd2023e72
- SSDEEP 6144:6UJJuV1cdhIoA7vJ0CLoCgvDLe4AmFvirGcEOkCybEaQRuy8K:6YsVOdhElvkCgvDLe4usOkxHy
- TLSH T191C48D29B6D0C036C5B39574C4A186BAEAB17432372549CFA3D5475A0F337E2BA7930E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-10_44d1c435021021e9bd26e722383e1dbd_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-10_44d1c435021021e9bd26e722383e1dbd_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- SHA256 4d48212b02a18df2b36e021849ae1f819858b68225ffcc14bfc786cd258b4f66
- MD5 44d1c435021021e9bd26e722383e1dbd
- SHA1 1fbf38cbb9d340539a0170c791c7caf914aacb2d
- SHA512 a64e5bf60df272748a0f15f1699253b483e3a705a4d76d0bac50a5e3658039ce76a855458fbb8d1112f5ef0d34b17894565795f93f06c4485b29c8fbd2023e72
- SSDEEP 6144:6UJJuV1cdhIoA7vJ0CLoCgvDLe4AmFvirGcEOkCybEaQRuy8K:6YsVOdhElvkCgvDLe4usOkxHy
- TLSH T191C48D29B6D0C036C5B39574C4A186BAEAB17432372549CFA3D5475A0F337E2BA7930E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory