General
- Target 2026-10-22_3b8a0f0e1f9680391488c58a1fe6d6ca_amadey_coinminer_elex_smoke-loader_stop
- Size 374KB
- Sample261024-tll8rsay5x
- SHA256 d0c8c4c5e98d92e59150fa3acb5fcf279a1979ce5e0a57351dc9d721c378a15f
- MD5 3b8a0f0e1f9680391488c58a1fe6d6ca
- SHA1 180a68aebbb2c7b7684a36eb8698005ad7c6a908
- SHA512 0a04efadb89bcd2ac85eeb194f30ec6b766a102924717877e0baa35caed91f910fb21c31e4eab717049c51c65740bd4566f2ef879a540909f85ab8c160e2b5fd
- SSDEEP 6144:ncTgav1cdCTuoPbgwmOLJvKRILSFvdFDcEOkCybEaQRXr9HNdvOa:nSvO2x9mONvKRILSFnOkx2LIa
- TLSH T149846D2AF6A0D076C4779579C4A247AAFBB1742137208ACFA390475A1F637E2BD3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-22_3b8a0f0e1f9680391488c58a1fe6d6ca_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-22_3b8a0f0e1f9680391488c58a1fe6d6ca_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_3b8a0f0e1f9680391488c58a1fe6d6ca_amadey_coinminer_elex_smoke-loader_stop
- Size 374KB
- SHA256 d0c8c4c5e98d92e59150fa3acb5fcf279a1979ce5e0a57351dc9d721c378a15f
- MD5 3b8a0f0e1f9680391488c58a1fe6d6ca
- SHA1 180a68aebbb2c7b7684a36eb8698005ad7c6a908
- SHA512 0a04efadb89bcd2ac85eeb194f30ec6b766a102924717877e0baa35caed91f910fb21c31e4eab717049c51c65740bd4566f2ef879a540909f85ab8c160e2b5fd
- SSDEEP 6144:ncTgav1cdCTuoPbgwmOLJvKRILSFvdFDcEOkCybEaQRXr9HNdvOa:nSvO2x9mONvKRILSFnOkx2LIa
- TLSH T149846D2AF6A0D076C4779579C4A247AAFBB1742137208ACFA390475A1F637E2BD3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Executes dropped EXE
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
Drops file in System32 directory