General
- Target 2026-10-13_d78752e80875a6db876358419373957e_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- Sample261014-fdc38sws8p
- SHA256 f7f7f8228c7e13fbe7e3984ef1c10ecea3aee1758079e7a40533167bf93cf23c
- MD5 d78752e80875a6db876358419373957e
- SHA1 4c4f3efbb944a0c713cfafea36103ec3eb53086e
- SHA512 da89dbdd1c1dc2eac937d44c4049c35c6933aca45350200134219f87ec76c09f45e60db11d61b9237065fe14a7882f95db0fe208d6e3585f5143dd3455b6a752
- SSDEEP 6144:74ZaN1cb90oOTFmIFLq0cvnXhLCqj2EFNirGcEOkCybEaQRuy8K:7rNOb9+sIF+0cvnXhLCqEsOkxHy
- TLSH T1C3C48D29B6E0C076C4B79578C4A186B6FAB17832372459CFA394075A1F337E2BA3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-13_d78752e80875a6db876358419373957e_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-13_d78752e80875a6db876358419373957e_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- SHA256 f7f7f8228c7e13fbe7e3984ef1c10ecea3aee1758079e7a40533167bf93cf23c
- MD5 d78752e80875a6db876358419373957e
- SHA1 4c4f3efbb944a0c713cfafea36103ec3eb53086e
- SHA512 da89dbdd1c1dc2eac937d44c4049c35c6933aca45350200134219f87ec76c09f45e60db11d61b9237065fe14a7882f95db0fe208d6e3585f5143dd3455b6a752
- SSDEEP 6144:74ZaN1cb90oOTFmIFLq0cvnXhLCqj2EFNirGcEOkCybEaQRuy8K:7rNOb9+sIF+0cvnXhLCqEsOkxHy
- TLSH T1C3C48D29B6E0C076C4B79578C4A186B6FAB17832372459CFA394075A1F337E2BA3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory