General
- Target 2026-10-25_ba7e79074d2d688c4b6af1d67c1cca49_amadey_coinminer_elex_smoke-loader_stop
- Size 525KB
- Sample261026-rtspeaxta1
- SHA256 8328997bb0747ebd0e9b369aaa6a113ca14d65d25f7d0590d0ec57322bec9e2e
- MD5 ba7e79074d2d688c4b6af1d67c1cca49
- SHA1 2197c0bebf8d7db41b74ec2f57261768cbf0bc68
- SHA512 a047b655dc243c2386b532bda87456ca41b5c8cf94f5a7cf7120b1912c9cf179a54d7fcffc58e1bb7fb610d538b6d7b5e4c8d2bad3d2f106b7ebf0d681e7782c
- SSDEEP 6144:ycTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K:ySvO2x9mONvKRwLSFtsOkx2LIa+y
- TLSH T1CCB47D2AB6A0D076C4779579C4A257BAFBB1742137204ACFA390475A1F237E2BE3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-25_ba7e79074d2d688c4b6af1d67c1cca49_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-25_ba7e79074d2d688c4b6af1d67c1cca49_amadey_coinminer_elex_smoke-loader_stop
- Size 525KB
- SHA256 8328997bb0747ebd0e9b369aaa6a113ca14d65d25f7d0590d0ec57322bec9e2e
- MD5 ba7e79074d2d688c4b6af1d67c1cca49
- SHA1 2197c0bebf8d7db41b74ec2f57261768cbf0bc68
- SHA512 a047b655dc243c2386b532bda87456ca41b5c8cf94f5a7cf7120b1912c9cf179a54d7fcffc58e1bb7fb610d538b6d7b5e4c8d2bad3d2f106b7ebf0d681e7782c
- SSDEEP 6144:ycTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K:ySvO2x9mONvKRwLSFtsOkx2LIa+y
- TLSH T1CCB47D2AB6A0D076C4779579C4A257BAFBB1742137204ACFA390475A1F237E2BE3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Custom signature
UPX dump on OEP (original entry point)
Executes dropped EXE
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
Drops file in System32 directory