General
- Target 2026-10-13_641b5c91a664e83e316219e66a47220d_amadey_coinminer_elex_smoke-loader_stop
- Size 638KB
- Sample261015-pcl47adf47
- SHA256 0815d5edb1a89d195cfe7d31c76a36bac67bafa8a3f6ec82eff5aad81cde5e59
- MD5 641b5c91a664e83e316219e66a47220d
- SHA1 c108569ec24fde8901575a3c5f07df77a0e85387
- SHA512 b4938a03b039686949476a733f1a85a2ae75161008f72766714ddd4a7341a9bb73639e8dd8af8dc15ed0a7f8ca25c27ae9dd1bb6da2adc533a3a58000d998ed2
- SSDEEP 6144:mcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8KU5R2:mSvO2x9mONvKRwLSFtsOkx2LIa+ya5g
- TLSH T1ADD46B26B6908037C0B74675C5B64BAAFAB5BC21631186CFA380761A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-13_641b5c91a664e83e316219e66a47220d_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-13_641b5c91a664e83e316219e66a47220d_amadey_coinminer_elex_smoke-loader_stop
- Size 638KB
- SHA256 0815d5edb1a89d195cfe7d31c76a36bac67bafa8a3f6ec82eff5aad81cde5e59
- MD5 641b5c91a664e83e316219e66a47220d
- SHA1 c108569ec24fde8901575a3c5f07df77a0e85387
- SHA512 b4938a03b039686949476a733f1a85a2ae75161008f72766714ddd4a7341a9bb73639e8dd8af8dc15ed0a7f8ca25c27ae9dd1bb6da2adc533a3a58000d998ed2
- SSDEEP 6144:mcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8KU5R2:mSvO2x9mONvKRwLSFtsOkx2LIa+ya5g
- TLSH T1ADD46B26B6908037C0B74675C5B64BAAFAB5BC21631186CFA380761A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory