General
- Target 2026-10-22_6b3280b099286f8138c8abc599932a0c_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- Sample261024-ltxepsaz7n
- SHA256 634896f4fe58e4833528255d18e04d32d5f1cba1bea7f797ca3c5e8e4ff5fd32
- MD5 6b3280b099286f8138c8abc599932a0c
- SHA1 b422e257247028cd5bc553016160a29defedf1e3
- SHA512 0f498247025a6e0b7f2a2b13bbf34e76be93d4410d13936d03c5b745b914d1f3d799f8f1c65825b8806b827e84cef90b7a198fa737ef7a599ebe192eb0655c91
- SSDEEP 6144:WUJJuV1cdhIoA7vJ0CLoCgvDLe4AmFvirGcEOkCybEaQRuy8K:WYsVOdhElvkCgvDLe4usOkxHy
- TLSH T1F8C48D29B6D0C036C5B39574C4A186BAEAB17432372549CFA3D5475A0F337E2BA7930E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-22_6b3280b099286f8138c8abc599932a0c_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_6b3280b099286f8138c8abc599932a0c_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- SHA256 634896f4fe58e4833528255d18e04d32d5f1cba1bea7f797ca3c5e8e4ff5fd32
- MD5 6b3280b099286f8138c8abc599932a0c
- SHA1 b422e257247028cd5bc553016160a29defedf1e3
- SHA512 0f498247025a6e0b7f2a2b13bbf34e76be93d4410d13936d03c5b745b914d1f3d799f8f1c65825b8806b827e84cef90b7a198fa737ef7a599ebe192eb0655c91
- SSDEEP 6144:WUJJuV1cdhIoA7vJ0CLoCgvDLe4AmFvirGcEOkCybEaQRuy8K:WYsVOdhElvkCgvDLe4usOkxHy
- TLSH T1F8C48D29B6D0C036C5B39574C4A186BAEAB17432372549CFA3D5475A0F337E2BA7930E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory