General
- Target 2026-10-13_641b5c91a664e83e316219e66a47220d_amadey_coinminer_elex_smoke-loader_stop
- Size 638KB
- Sample261015-pcl47adf47
- SHA256 0815d5edb1a89d195cfe7d31c76a36bac67bafa8a3f6ec82eff5aad81cde5e59
- MD5 641b5c91a664e83e316219e66a47220d
- SHA1 c108569ec24fde8901575a3c5f07df77a0e85387
- SHA512 b4938a03b039686949476a733f1a85a2ae75161008f72766714ddd4a7341a9bb73639e8dd8af8dc15ed0a7f8ca25c27ae9dd1bb6da2adc533a3a58000d998ed2
- SSDEEP 6144:mcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8KU5R2:mSvO2x9mONvKRwLSFtsOkx2LIa+ya5g
- TLSH T1ADD46B26B6908037C0B74675C5B64BAAFAB5BC21631186CFA380761A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-13_641b5c91a664e83e316219e66a47220d_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-13_641b5c91a664e83e316219e66a47220d_amadey_coinminer_elex_smoke-loader_stop
- Size 638KB
- SHA256 0815d5edb1a89d195cfe7d31c76a36bac67bafa8a3f6ec82eff5aad81cde5e59
- MD5 641b5c91a664e83e316219e66a47220d
- SHA1 c108569ec24fde8901575a3c5f07df77a0e85387
- SHA512 b4938a03b039686949476a733f1a85a2ae75161008f72766714ddd4a7341a9bb73639e8dd8af8dc15ed0a7f8ca25c27ae9dd1bb6da2adc533a3a58000d998ed2
- SSDEEP 6144:mcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8KU5R2:mSvO2x9mONvKRwLSFtsOkx2LIa+ya5g
- TLSH T1ADD46B26B6908037C0B74675C5B64BAAFAB5BC21631186CFA380761A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Custom signature
UPX dump on OEP (original entry point)
Executes dropped EXE
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
Drops file in System32 directory