General
- Target 2026-10-14_98c16ce3c9d769995f2dcb2f3f598410_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- Sample261014-tp4l8aez2j
- SHA256 6311fb94e7527c9b28ba4ea3af876b5a044c890890f31c75dcdcdd2c64498324
- MD5 98c16ce3c9d769995f2dcb2f3f598410
- SHA1 cfac5b1569e05a0d896fea5cd3cd6bc7b42e9b76
- SHA512 24a33b093c98eff5313e32791745c16a51cb5f23d04c1e0e429202a3fb4c753f394ccf5da0f1602490bda801aa5eb37b0524645a8aee8ae702db6edc58fcb019
- SSDEEP 6144:dWVrC1c2oonALgPLj7vf1LKlyIFVirGcEOkCybEaQRXr9HNdvOa+y8K:dkCO2zVPX7vf1LKlIsOkx2LIa+y
- TLSH T1C7C47C2AF6A0C036C4779574C4A257AAFFB1B42127204ACFA390475A1F637E2BE7531D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-14_98c16ce3c9d769995f2dcb2f3f598410_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-14_98c16ce3c9d769995f2dcb2f3f598410_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- SHA256 6311fb94e7527c9b28ba4ea3af876b5a044c890890f31c75dcdcdd2c64498324
- MD5 98c16ce3c9d769995f2dcb2f3f598410
- SHA1 cfac5b1569e05a0d896fea5cd3cd6bc7b42e9b76
- SHA512 24a33b093c98eff5313e32791745c16a51cb5f23d04c1e0e429202a3fb4c753f394ccf5da0f1602490bda801aa5eb37b0524645a8aee8ae702db6edc58fcb019
- SSDEEP 6144:dWVrC1c2oonALgPLj7vf1LKlyIFVirGcEOkCybEaQRXr9HNdvOa+y8K:dkCO2zVPX7vf1LKlIsOkx2LIa+y
- TLSH T1C7C47C2AF6A0C036C4779574C4A257AAFFB1B42127204ACFA390475A1F637E2BE7531D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Custom signature
UPX dump on OEP (original entry point)
Executes dropped EXE
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
Drops file in System32 directory