General
- Target 2026-10-21_8a3626990601e6b44e68061dd6020bee_amadey_coinminer_elex_smoke-loader_stop
- Size 525KB
- Sample261022-w39fqsbb98
- SHA256 23cfb179ed8b0d84a3321a6532669704e917f29d406a085d456163b22791827d
- MD5 8a3626990601e6b44e68061dd6020bee
- SHA1 8b69b0fd5af3b779851ec51664d87e1deb72f8f0
- SHA512 2c999dcb31e8eacf1ded126b6f01da087444a78c4af289b2dfd3d3339b842bc93b1fcf98209991232ec85ba543a44a4301b52794fe799a0cc688a88fe1d0cfae
- SSDEEP 6144:WcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K:WSvO2x9mONvKRwLSFtsOkx2LIa+y
- TLSH T1A1B47D2AB6A0D076C4779579C4A257BAFBB1742137204ACFA390475A1F237E2BE3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-21_8a3626990601e6b44e68061dd6020bee_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-21_8a3626990601e6b44e68061dd6020bee_amadey_coinminer_elex_smoke-loader_stop
- Size 525KB
- SHA256 23cfb179ed8b0d84a3321a6532669704e917f29d406a085d456163b22791827d
- MD5 8a3626990601e6b44e68061dd6020bee
- SHA1 8b69b0fd5af3b779851ec51664d87e1deb72f8f0
- SHA512 2c999dcb31e8eacf1ded126b6f01da087444a78c4af289b2dfd3d3339b842bc93b1fcf98209991232ec85ba543a44a4301b52794fe799a0cc688a88fe1d0cfae
- SSDEEP 6144:WcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K:WSvO2x9mONvKRwLSFtsOkx2LIa+y
- TLSH T1A1B47D2AB6A0D076C4779579C4A257BAFBB1742137204ACFA390475A1F237E2BE3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory