General
- Target 2026-10-16_6481044428b2a0f3cf6b1ed347dbe7bc_amadey_coinminer_elex_smoke-loader_stop
- Size 766KB
- Sample261017-tc7hcahw2k
- SHA256 62dabfa84067cb18afcc2389483b111b422977bf2a1003b7f89105cab4ef5155
- MD5 6481044428b2a0f3cf6b1ed347dbe7bc
- SHA1 473b43a414d53c5c701a798b83e8dfe509240481
- SHA512 60a83f0e6db589a937ccfc1a5e9538a222fc7963c16f2b0d1b1332981d6efaaa0108db06721fc0fcd69c338ff297950574b08ce6a470e6c298f06c442aae955a
- SSDEEP 12288:nSvO2x9mONvKRwLSFtsOkx2LIa+ya5FAQjU/Liw:SvO2xJKRw2kOkx2LFRvcUV
- TLSH T178F45A31E241C03AD0A74576C6FA0BAFE564BD25531155CBA3C43A6A2FB36D2BE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-16_6481044428b2a0f3cf6b1ed347dbe7bc_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-16_6481044428b2a0f3cf6b1ed347dbe7bc_amadey_coinminer_elex_smoke-loader_stop
- Size 766KB
- SHA256 62dabfa84067cb18afcc2389483b111b422977bf2a1003b7f89105cab4ef5155
- MD5 6481044428b2a0f3cf6b1ed347dbe7bc
- SHA1 473b43a414d53c5c701a798b83e8dfe509240481
- SHA512 60a83f0e6db589a937ccfc1a5e9538a222fc7963c16f2b0d1b1332981d6efaaa0108db06721fc0fcd69c338ff297950574b08ce6a470e6c298f06c442aae955a
- SSDEEP 12288:nSvO2x9mONvKRwLSFtsOkx2LIa+ya5FAQjU/Liw:SvO2xJKRw2kOkx2LFRvcUV
- TLSH T178F45A31E241C03AD0A74576C6FA0BAFE564BD25531155CBA3C43A6A2FB36D2BE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Custom signature
UPX dump on OEP (original entry point)
Executes dropped EXE
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
Drops file in System32 directory