General
- Target 2026-10-21_9cc93cb434801ce79c28047fb64f65df_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- Sample261022-s69dcsaf86
- SHA256 660791db5de0faf8a202e4ffabdbaf60503851de8d6dd65fc4b2ba92dcb2ab6c
- MD5 9cc93cb434801ce79c28047fb64f65df
- SHA1 d4ae1e7c1b61f672450b6295aacdefaf902b3ba8
- SHA512 a8993e940138cabc39bb36ca0cb90adea3603c39abb5c1f79431c6b024cf1ca5beceabab6367c1f12a7d60a5a9183f47fe5eb4b4cf6470a557888da67f837045
- SSDEEP 6144:3cTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:3SvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T15FD45B35A6808036C0B74631C6F64BAAF9B5BC21631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-21_9cc93cb434801ce79c28047fb64f65df_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-21_9cc93cb434801ce79c28047fb64f65df_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- SHA256 660791db5de0faf8a202e4ffabdbaf60503851de8d6dd65fc4b2ba92dcb2ab6c
- MD5 9cc93cb434801ce79c28047fb64f65df
- SHA1 d4ae1e7c1b61f672450b6295aacdefaf902b3ba8
- SHA512 a8993e940138cabc39bb36ca0cb90adea3603c39abb5c1f79431c6b024cf1ca5beceabab6367c1f12a7d60a5a9183f47fe5eb4b4cf6470a557888da67f837045
- SSDEEP 6144:3cTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:3SvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T15FD45B35A6808036C0B74631C6F64BAAF9B5BC21631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory