General
- Target 2026-10-18_5ddf029e2b9b15883149290d03ce6446_amadey_coinminer_elex_smoke-loader_stop
- Size 511KB
- Sample261018-ranlcady7j
- SHA256 747b0848969d09daad5d0865300af0902f5bb121d628f495255953dea8a7ea1c
- MD5 5ddf029e2b9b15883149290d03ce6446
- SHA1 6fadbfc741805401546cbf68069b2d9121aba1be
- SHA512 a71ffe89626cbc1903fcb3802021c3deb32a17f26780eff58528dbf69b5e472b434588b51a3cb942db1d49380beab3dfb6846b3d01c813b78c88f39b225d084d
- SSDEEP 6144:ecTgav1cdCTuoPbgwmOLJvKRILSFvdFDcEOkCybEaQRXr9HNdvOax5Rv0:eSvO2x9mONvKRILSFnOkx2LIax5F0
- TLSH T1FFB45C26F6908036C4B34575C5F64BAAFAB4BC21631156CBA3943A6A1F737D2BD3130E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-18_5ddf029e2b9b15883149290d03ce6446_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-18_5ddf029e2b9b15883149290d03ce6446_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-18_5ddf029e2b9b15883149290d03ce6446_amadey_coinminer_elex_smoke-loader_stop
- Size 511KB
- SHA256 747b0848969d09daad5d0865300af0902f5bb121d628f495255953dea8a7ea1c
- MD5 5ddf029e2b9b15883149290d03ce6446
- SHA1 6fadbfc741805401546cbf68069b2d9121aba1be
- SHA512 a71ffe89626cbc1903fcb3802021c3deb32a17f26780eff58528dbf69b5e472b434588b51a3cb942db1d49380beab3dfb6846b3d01c813b78c88f39b225d084d
- SSDEEP 6144:ecTgav1cdCTuoPbgwmOLJvKRILSFvdFDcEOkCybEaQRXr9HNdvOax5Rv0:eSvO2x9mONvKRILSFnOkx2LIax5F0
- TLSH T1FFB45C26F6908036C4B34575C5F64BAAFAB4BC21631156CBA3943A6A1F737D2BD3130E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory