General
- Target 2026-10-13_e72757267506e4523eda572884c994de_amadey_coinminer_elex_smoke-loader_stop
- Size 576KB
- Sample261014-dbdkwaft3j
- SHA256 f458dae0b0d52234ef91a5ee6299a9cd5b77f396dcfa4811e11cc519e53fc297
- MD5 e72757267506e4523eda572884c994de
- SHA1 8612743641be0c2c09168c66f463786b397c52e3
- SHA512 aef8b72953dfd4d9605e157d69e39fbbab168fa47267a3a2a50a2a534e4fd220c4628488a96fdba37b788907fb690e1f121fee8c91eacc3329aef43e98921668
- SSDEEP 6144:CcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K/:CSvO2x9mONvKRwLSFtsOkx2LIa+yx
- TLSH T1EDC46D26B6908072C4779578C4A257AAFBB1BC2127204ACFA390775A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-13_e72757267506e4523eda572884c994de_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-13_e72757267506e4523eda572884c994de_amadey_coinminer_elex_smoke-loader_stop
- Size 576KB
- SHA256 f458dae0b0d52234ef91a5ee6299a9cd5b77f396dcfa4811e11cc519e53fc297
- MD5 e72757267506e4523eda572884c994de
- SHA1 8612743641be0c2c09168c66f463786b397c52e3
- SHA512 aef8b72953dfd4d9605e157d69e39fbbab168fa47267a3a2a50a2a534e4fd220c4628488a96fdba37b788907fb690e1f121fee8c91eacc3329aef43e98921668
- SSDEEP 6144:CcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K/:CSvO2x9mONvKRwLSFtsOkx2LIa+yx
- TLSH T1EDC46D26B6908072C4779578C4A257AAFBB1BC2127204ACFA390775A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Custom signature
UPX dump on OEP (original entry point)
Executes dropped EXE
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
Drops file in System32 directory