General
- Target 2026-10-22_99b26a3eb44891eef50843b2e88e0021_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- Sample261024-d3zmesfv6z
- SHA256 e059fac8870587ab11709ea4ca83b159154322a832a2121418e941bc37c43ed5
- MD5 99b26a3eb44891eef50843b2e88e0021
- SHA1 92a4063116054f38f8b31d0a4a5c37701ce051a7
- SHA512 f496426958c66f9814d2da6a2f344aea5647de1e68c9601c55d56c8241f6d149703f1bfe8f5e60df4bdf284daad938d9e6f2b3438db21c1d6ebaae2c74b44f2e
- SSDEEP 6144:IWVrC1c2oonALgPLj7vf1LKlyIFVirGcEOkCybEaQRuy8K:IkCO2zVPX7vf1LKlIsOkxHy
- TLSH T136C47C29B690D076C4779574C4A187AAFAB1B432372449CFB3D40B5A1F237E2BA7530E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-22_99b26a3eb44891eef50843b2e88e0021_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_99b26a3eb44891eef50843b2e88e0021_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- SHA256 e059fac8870587ab11709ea4ca83b159154322a832a2121418e941bc37c43ed5
- MD5 99b26a3eb44891eef50843b2e88e0021
- SHA1 92a4063116054f38f8b31d0a4a5c37701ce051a7
- SHA512 f496426958c66f9814d2da6a2f344aea5647de1e68c9601c55d56c8241f6d149703f1bfe8f5e60df4bdf284daad938d9e6f2b3438db21c1d6ebaae2c74b44f2e
- SSDEEP 6144:IWVrC1c2oonALgPLj7vf1LKlyIFVirGcEOkCybEaQRuy8K:IkCO2zVPX7vf1LKlIsOkxHy
- TLSH T136C47C29B690D076C4779574C4A187AAFAB1B432372449CFB3D40B5A1F237E2BA7530E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Custom signature
UPX dump on OEP (original entry point)
Executes dropped EXE
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
Drops file in System32 directory