General
- Target 2026-10-22_f56088eca4caa3b6a269b705b763cb0a_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- Sample261023-clckwsbv7q
- SHA256 326395d8415a99e1491246e2f6f08844cf98ebeb4e19eabd3383902c5648857e
- MD5 f56088eca4caa3b6a269b705b763cb0a
- SHA1 55130e22f8260ee1f22a015b91260fe9b576fdf9
- SHA512 1e1a2a3c4d100f20dfd979ca2ea67c2b472bba7a7f83d46ad34d91925a1f1d9deb155fb8984d07524d458de86b084ec23daf76a83009da4f596e3567353b364d
- SSDEEP 6144:G4ZaN1cb90oOTFmIFLq0cvnXhLCqj2EFNirGcEOkCybEaQRuy8K:GrNOb9+sIF+0cvnXhLCqEsOkxHy
- TLSH T1ADC48D29B6E0C076C4B79578C4A186B6FAB17832372459CFA394075A1F337E2BA3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-22_f56088eca4caa3b6a269b705b763cb0a_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_f56088eca4caa3b6a269b705b763cb0a_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- SHA256 326395d8415a99e1491246e2f6f08844cf98ebeb4e19eabd3383902c5648857e
- MD5 f56088eca4caa3b6a269b705b763cb0a
- SHA1 55130e22f8260ee1f22a015b91260fe9b576fdf9
- SHA512 1e1a2a3c4d100f20dfd979ca2ea67c2b472bba7a7f83d46ad34d91925a1f1d9deb155fb8984d07524d458de86b084ec23daf76a83009da4f596e3567353b364d
- SSDEEP 6144:G4ZaN1cb90oOTFmIFLq0cvnXhLCqj2EFNirGcEOkCybEaQRuy8K:GrNOb9+sIF+0cvnXhLCqEsOkxHy
- TLSH T1ADC48D29B6E0C076C4B79578C4A186B6FAB17832372459CFA394075A1F337E2BA3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Custom signature
UPX dump on OEP (original entry point)
Executes dropped EXE
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
Drops file in System32 directory