General
- Target 2026-10-19_b6f062d57dab7ac537146c3f05f0f1c5_amadey_coinminer_elex_smoke-loader_stop
- Size 525KB
- Sample261020-mjdqaaba94
- SHA256 42c03d8b820d0a99461ade63bbfb766fd2c840b40925df9268b960126e29eecb
- MD5 b6f062d57dab7ac537146c3f05f0f1c5
- SHA1 1c149c58e6ebc682fffed3242b0a4c41f3494cf7
- SHA512 8b868eacf3287e7b70f8978287c99fbf7eadd1fd33e3b36ed2c6eacaa59aae8aed78d83ce0f03ee2795c91c8a27a151c48e0df459a5cc30a77fc5221dd679401
- SSDEEP 6144:RcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K:RSvO2x9mONvKRwLSFtsOkx2LIa+y
- TLSH T1BDB47D2AB6A0D076C4779579C4A257BAFBB1742137204ACFA390475A1F237E2BE3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-19_b6f062d57dab7ac537146c3f05f0f1c5_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-19_b6f062d57dab7ac537146c3f05f0f1c5_amadey_coinminer_elex_smoke-loader_stop
- Size 525KB
- SHA256 42c03d8b820d0a99461ade63bbfb766fd2c840b40925df9268b960126e29eecb
- MD5 b6f062d57dab7ac537146c3f05f0f1c5
- SHA1 1c149c58e6ebc682fffed3242b0a4c41f3494cf7
- SHA512 8b868eacf3287e7b70f8978287c99fbf7eadd1fd33e3b36ed2c6eacaa59aae8aed78d83ce0f03ee2795c91c8a27a151c48e0df459a5cc30a77fc5221dd679401
- SSDEEP 6144:RcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K:RSvO2x9mONvKRwLSFtsOkx2LIa+y
- TLSH T1BDB47D2AB6A0D076C4779579C4A257BAFBB1742137204ACFA390475A1F237E2BE3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Custom signature
UPX dump on OEP (original entry point)
Executes dropped EXE
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
Drops file in System32 directory