General
- Target 2026-10-22_7bba4f704dcfb689c4213f106b9c650d_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- Sample261024-jf3y8aee52
- SHA256 5a6aaed0cef266bfe56f6e706dee3e9c505b36ec7258c0f6db7e573ca70de1ca
- MD5 7bba4f704dcfb689c4213f106b9c650d
- SHA1 a706254d5ff9ef6ed50a1700c047c567991d1749
- SHA512 c290049ae1c821946cfce781b21a120e732f1bc9214b1b1637bbcc7376fb7b01a19adb3297ee86953047e9839008b05b174f24d7cb69ad5505a39762b094a103
- SSDEEP 6144:+wl6N1c9bcoaTB5RLPuA0Tim1LCGGlOFJirGcEOkCybEaQRXr9HNdvOa+y8K:+vNO9bSnRTuA0/1LCGYsOkx2LIa+y
- TLSH T1E4C47D2AB6A0D076C4B79579C4A256A6FFB1743237204ACFA390475A1F237D2BE3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-22_7bba4f704dcfb689c4213f106b9c650d_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_7bba4f704dcfb689c4213f106b9c650d_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- SHA256 5a6aaed0cef266bfe56f6e706dee3e9c505b36ec7258c0f6db7e573ca70de1ca
- MD5 7bba4f704dcfb689c4213f106b9c650d
- SHA1 a706254d5ff9ef6ed50a1700c047c567991d1749
- SHA512 c290049ae1c821946cfce781b21a120e732f1bc9214b1b1637bbcc7376fb7b01a19adb3297ee86953047e9839008b05b174f24d7cb69ad5505a39762b094a103
- SSDEEP 6144:+wl6N1c9bcoaTB5RLPuA0Tim1LCGGlOFJirGcEOkCybEaQRXr9HNdvOa+y8K:+vNO9bSnRTuA0/1LCGYsOkx2LIa+y
- TLSH T1E4C47D2AB6A0D076C4B79579C4A256A6FFB1743237204ACFA390475A1F237D2BE3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory