General
- Target 2026-10-25_786d3c47facfaa6f258661a4682887dc_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- Sample261026-3bp2cazvht
- SHA256 2f1444c71a8fbda8989294003e73aad3270ce28406fbc8dfabf765d4bb57a831
- MD5 786d3c47facfaa6f258661a4682887dc
- SHA1 20ec601b2369cf111ef628c6f6172bb313406a47
- SHA512 4549c5692809ff4e8ba9297c85526d3f3f0d7c487b70fd9fe5d6077909e43f067b6a4276ac95c3e8988abeb9f8f0ba27d52fa6ce3ea237864d762ff71ef1122e
- SSDEEP 6144:qwl6N1c9bcoaTB5RLPuA0Tim1LCGGlOFJirGcEOkCybEaQRXr9HNdvOa+y8K:qvNO9bSnRTuA0/1LCGYsOkx2LIa+y
- TLSH T112C47D2AB6A0D076C4B79579C4A256A6FFB1743237204ACFA390475A1F237D2BE3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-25_786d3c47facfaa6f258661a4682887dc_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-25_786d3c47facfaa6f258661a4682887dc_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- SHA256 2f1444c71a8fbda8989294003e73aad3270ce28406fbc8dfabf765d4bb57a831
- MD5 786d3c47facfaa6f258661a4682887dc
- SHA1 20ec601b2369cf111ef628c6f6172bb313406a47
- SHA512 4549c5692809ff4e8ba9297c85526d3f3f0d7c487b70fd9fe5d6077909e43f067b6a4276ac95c3e8988abeb9f8f0ba27d52fa6ce3ea237864d762ff71ef1122e
- SSDEEP 6144:qwl6N1c9bcoaTB5RLPuA0Tim1LCGGlOFJirGcEOkCybEaQRXr9HNdvOa+y8K:qvNO9bSnRTuA0/1LCGYsOkx2LIa+y
- TLSH T112C47D2AB6A0D076C4B79579C4A256A6FFB1743237204ACFA390475A1F237D2BE3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory