General
- Target 2026-10-13_fa14462ee4052c4ae5ce26cdbcbf2392_amadey_coinminer_elex_smoke-loader_stop
- Size 766KB
- Sample261014-arax5swtb1
- SHA256 eca6b1891b9656cb19a94ad4133b7dc8b34b2a0e9219576f3f8ee17f657153b5
- MD5 fa14462ee4052c4ae5ce26cdbcbf2392
- SHA1 9b078687df71c49d9c2a8a05d205a3b78c44cf1b
- SHA512 60bf3c5de2947961799d8ce880aa3d8b98846193c57633775c78d95c8351a7512fecec99f21de6f6db3a47ca4407e05efcce09d13a97631d20abcd01f9cbcae7
- SSDEEP 12288:USvO2x9mONvKRwLSFtsOkx2LIa+ya5FAQjU/Liw:nvO2xJKRw2kOkx2LFRvcUV
- TLSH T1ADF45A31E241C03AD0A74576C6FA0BAFE564BD25531155CBA3C43A6A2FB36D2BE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-13_fa14462ee4052c4ae5ce26cdbcbf2392_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-13_fa14462ee4052c4ae5ce26cdbcbf2392_amadey_coinminer_elex_smoke-loader_stop
- Size 766KB
- SHA256 eca6b1891b9656cb19a94ad4133b7dc8b34b2a0e9219576f3f8ee17f657153b5
- MD5 fa14462ee4052c4ae5ce26cdbcbf2392
- SHA1 9b078687df71c49d9c2a8a05d205a3b78c44cf1b
- SHA512 60bf3c5de2947961799d8ce880aa3d8b98846193c57633775c78d95c8351a7512fecec99f21de6f6db3a47ca4407e05efcce09d13a97631d20abcd01f9cbcae7
- SSDEEP 12288:USvO2x9mONvKRwLSFtsOkx2LIa+ya5FAQjU/Liw:nvO2xJKRw2kOkx2LFRvcUV
- TLSH T1ADF45A31E241C03AD0A74576C6FA0BAFE564BD25531155CBA3C43A6A2FB36D2BE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory