General
- Target 2026-10-14_b30b32bee9241d4d02f404e3fd59e532_amadey_coinminer_elex_smoke-loader_stop
- Size 525KB
- Sample261014-rc4ekswva1
- SHA256 a16f7110e79257691e6ea52e688a861b82efadc89dfddef8a77bcf814dd85e92
- MD5 b30b32bee9241d4d02f404e3fd59e532
- SHA1 1fb7c2b586f07ce3b1c77ced7f7db96aa5c45393
- SHA512 8c39a50d78679ceb1fb316c6b0123c1d8ed462da19cf0409bef12b3ddbbd4a114c0cda83d5a8cb6ca718dc26e8156f2285d165a828d73440e92c9987aa18e6d6
- SSDEEP 6144:/cTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K:/SvO2x9mONvKRwLSFtsOkx2LIa+y
- TLSH T125B47D2AB6A0D076C4779579C4A257BAFBB1742137204ACFA390475A1F237E2BE3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-14_b30b32bee9241d4d02f404e3fd59e532_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-14_b30b32bee9241d4d02f404e3fd59e532_amadey_coinminer_elex_smoke-loader_stop
- Size 525KB
- SHA256 a16f7110e79257691e6ea52e688a861b82efadc89dfddef8a77bcf814dd85e92
- MD5 b30b32bee9241d4d02f404e3fd59e532
- SHA1 1fb7c2b586f07ce3b1c77ced7f7db96aa5c45393
- SHA512 8c39a50d78679ceb1fb316c6b0123c1d8ed462da19cf0409bef12b3ddbbd4a114c0cda83d5a8cb6ca718dc26e8156f2285d165a828d73440e92c9987aa18e6d6
- SSDEEP 6144:/cTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K:/SvO2x9mONvKRwLSFtsOkx2LIa+y
- TLSH T125B47D2AB6A0D076C4779579C4A257BAFBB1742137204ACFA390475A1F237E2BE3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory