General
- Target 2026-10-10_40babf5a08043e72d5e03b94ab2846a0_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- Sample261011-tktw8abs61
- SHA256 d75a640c262e9c87f994f49afbf2bdec291ca6baea4bd414e4f5cbe77800a407
- MD5 40babf5a08043e72d5e03b94ab2846a0
- SHA1 643e9f7d4f04b17cef5fa74c9baf4f2f1d099c6c
- SHA512 5bad6033e3956c600be82c145fb401e24749f8bdf210c02266f4906beffbab4fb45e39033c5d4377cac7c0499d503bd51722fd9a99d34f4b8455b3598edc4e45
- SSDEEP 6144:ZcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:ZSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T106D45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-10_40babf5a08043e72d5e03b94ab2846a0_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-10_40babf5a08043e72d5e03b94ab2846a0_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- SHA256 d75a640c262e9c87f994f49afbf2bdec291ca6baea4bd414e4f5cbe77800a407
- MD5 40babf5a08043e72d5e03b94ab2846a0
- SHA1 643e9f7d4f04b17cef5fa74c9baf4f2f1d099c6c
- SHA512 5bad6033e3956c600be82c145fb401e24749f8bdf210c02266f4906beffbab4fb45e39033c5d4377cac7c0499d503bd51722fd9a99d34f4b8455b3598edc4e45
- SSDEEP 6144:ZcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:ZSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T106D45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory