General
- Target 2026-10-14_db433ae4641f75d958bbe42d1ea0c4cc_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- Sample261014-mwdwtattex
- SHA256 28722d7022d0d276cc60b8d8ccbc414f10b59d0a81d08f7bf017581612814515
- MD5 db433ae4641f75d958bbe42d1ea0c4cc
- SHA1 f851d208393b7997649ce3079be034df2d938002
- SHA512 508734e9a8467a55b49c7f459d33e5723b2156fe58bb8c99a63a5101c3da6603fa9658517dc9183bd3e82fe970bb9656eac0e198121e7feecefa6b153d633798
- SSDEEP 6144:SWVrC1c2oonALgPLj7vf1LKlyIFVirGcEOkCybEaQRXr9HNdvOa+y8K:SkCO2zVPX7vf1LKlIsOkx2LIa+y
- TLSH T1A8C47C2AF6A0C036C4779574C4A257AAFFB1B42127204ACFA390475A1F637E2BE7531D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-14_db433ae4641f75d958bbe42d1ea0c4cc_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-14_db433ae4641f75d958bbe42d1ea0c4cc_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- SHA256 28722d7022d0d276cc60b8d8ccbc414f10b59d0a81d08f7bf017581612814515
- MD5 db433ae4641f75d958bbe42d1ea0c4cc
- SHA1 f851d208393b7997649ce3079be034df2d938002
- SHA512 508734e9a8467a55b49c7f459d33e5723b2156fe58bb8c99a63a5101c3da6603fa9658517dc9183bd3e82fe970bb9656eac0e198121e7feecefa6b153d633798
- SSDEEP 6144:SWVrC1c2oonALgPLj7vf1LKlyIFVirGcEOkCybEaQRXr9HNdvOa+y8K:SkCO2zVPX7vf1LKlIsOkx2LIa+y
- TLSH T1A8C47C2AF6A0C036C4779574C4A257AAFFB1B42127204ACFA390475A1F637E2BE7531D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory