General
- Target 2026-10-19_390e21d6cf39813f3e43cac348e85e7e_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- Sample261020-29b2psbs2k
- SHA256 ad63b02ad6035373910fdc046b080a0a7ce96e6cfa220c1302b0ddc42a1b6233
- MD5 390e21d6cf39813f3e43cac348e85e7e
- SHA1 88b6ba94a7ce30a57ba462c0eabbfd64f265e061
- SHA512 849619c5dec0cd16e9909f78b532cf8d28b59a679b285ea1bd632d493abfdeb9d5ff6e7ef6bfe64b2a37ea0a432294f29b1db34fc177b5b97739fc7cb2620052
- SSDEEP 6144:2UJJuV1cdhIoA7vJ0CLoCgvDLe4AmFvirGcEOkCybEaQRuy8K:2YsVOdhElvkCgvDLe4usOkxHy
- TLSH T1E3C48D29B6D0C036C5B39574C4A186BAEAB17432372549CFA3D5475A0F337E2BA7930E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-19_390e21d6cf39813f3e43cac348e85e7e_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-19_390e21d6cf39813f3e43cac348e85e7e_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- SHA256 ad63b02ad6035373910fdc046b080a0a7ce96e6cfa220c1302b0ddc42a1b6233
- MD5 390e21d6cf39813f3e43cac348e85e7e
- SHA1 88b6ba94a7ce30a57ba462c0eabbfd64f265e061
- SHA512 849619c5dec0cd16e9909f78b532cf8d28b59a679b285ea1bd632d493abfdeb9d5ff6e7ef6bfe64b2a37ea0a432294f29b1db34fc177b5b97739fc7cb2620052
- SSDEEP 6144:2UJJuV1cdhIoA7vJ0CLoCgvDLe4AmFvirGcEOkCybEaQRuy8K:2YsVOdhElvkCgvDLe4usOkxHy
- TLSH T1E3C48D29B6D0C036C5B39574C4A186BAEAB17432372549CFA3D5475A0F337E2BA7930E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory