General
- Target 2026-10-19_375dea26ab6cb7b124b466c491caa177_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- Sample261020-3ex65abs7q
- SHA256 cc42d979572173c48c7aa04e84a10720fc9d610236cb4bb8d28de4c1541c0149
- MD5 375dea26ab6cb7b124b466c491caa177
- SHA1 ca78c16175df38297cd7d5ad64e6b77b6b5b7f78
- SHA512 eb0c67f5eea2079dc0e5cd34766f095eb6bfe1210d46e3a1ec1ab8398d84bd23531ab79c98cacf1082988b2ab462a00770e52fbef451609cbb5f48b94a4dbcc6
- SSDEEP 6144:LcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:LSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T176D45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-19_375dea26ab6cb7b124b466c491caa177_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-19_375dea26ab6cb7b124b466c491caa177_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- SHA256 cc42d979572173c48c7aa04e84a10720fc9d610236cb4bb8d28de4c1541c0149
- MD5 375dea26ab6cb7b124b466c491caa177
- SHA1 ca78c16175df38297cd7d5ad64e6b77b6b5b7f78
- SHA512 eb0c67f5eea2079dc0e5cd34766f095eb6bfe1210d46e3a1ec1ab8398d84bd23531ab79c98cacf1082988b2ab462a00770e52fbef451609cbb5f48b94a4dbcc6
- SSDEEP 6144:LcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:LSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T176D45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Custom signature
UPX dump on OEP (original entry point)
Executes dropped EXE
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
Drops file in System32 directory