General
- Target 2026-10-23_e65fe8baca558b0365cb7158e59ebcef_amadey_coinminer_elex_smoke-loader_stop
- Size 525KB
- Sample261023-g3tmysct2j
- SHA256 b45107251def4d90980417b98b45a7e8fa9c6b825afe74980cb7c5667825d110
- MD5 e65fe8baca558b0365cb7158e59ebcef
- SHA1 2f35010790d515a31c741ce07b92b4ced7511925
- SHA512 ff3f0c760728a89b08f0a9737e89ab08fd6f6c3bb8443fa42acd8e2855b67a9799660f031fcf7f0f8c822f71d3417ae3a671ec210d24515432365f2be862a3a9
- SSDEEP 6144:2cTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K:2SvO2x9mONvKRwLSFtsOkx2LIa+y
- TLSH T112B47D2AB6A0D076C4779579C4A257BAFBB1742137204ACFA390475A1F237E2BE3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-23_e65fe8baca558b0365cb7158e59ebcef_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-23_e65fe8baca558b0365cb7158e59ebcef_amadey_coinminer_elex_smoke-loader_stop
- Size 525KB
- SHA256 b45107251def4d90980417b98b45a7e8fa9c6b825afe74980cb7c5667825d110
- MD5 e65fe8baca558b0365cb7158e59ebcef
- SHA1 2f35010790d515a31c741ce07b92b4ced7511925
- SHA512 ff3f0c760728a89b08f0a9737e89ab08fd6f6c3bb8443fa42acd8e2855b67a9799660f031fcf7f0f8c822f71d3417ae3a671ec210d24515432365f2be862a3a9
- SSDEEP 6144:2cTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K:2SvO2x9mONvKRwLSFtsOkx2LIa+y
- TLSH T112B47D2AB6A0D076C4779579C4A257BAFBB1742137204ACFA390475A1F237E2BE3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Custom signature
UPX dump on OEP (original entry point)
Executes dropped EXE
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
Drops file in System32 directory