General
- Target 2026-10-21_88b323c9c6e75f9e43e91d507cf0ea05_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- Sample261022-xa3cdsttax
- SHA256 2aae2c9a7f3303fdacaf048ee8990dfd7571d1929f6e32d2ab967db51582cd40
- MD5 88b323c9c6e75f9e43e91d507cf0ea05
- SHA1 b5173759effeaf4786c98f8af0b2e71ffc90fe92
- SHA512 07c40ad8ef39bd1d3aef26318f47dd225b5244adc725892c28a979a9f84a46197027b2e72aae582aac222df2305c015bda56b1bc299bda0f70962461ed9e3cf0
- SSDEEP 6144:TcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:TSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T13CD45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-21_88b323c9c6e75f9e43e91d507cf0ea05_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-21_88b323c9c6e75f9e43e91d507cf0ea05_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- SHA256 2aae2c9a7f3303fdacaf048ee8990dfd7571d1929f6e32d2ab967db51582cd40
- MD5 88b323c9c6e75f9e43e91d507cf0ea05
- SHA1 b5173759effeaf4786c98f8af0b2e71ffc90fe92
- SHA512 07c40ad8ef39bd1d3aef26318f47dd225b5244adc725892c28a979a9f84a46197027b2e72aae582aac222df2305c015bda56b1bc299bda0f70962461ed9e3cf0
- SSDEEP 6144:TcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:TSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T13CD45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Custom signature
UPX dump on OEP (original entry point)
Executes dropped EXE
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
Drops file in System32 directory