General
- Target 2026-10-25_920eb84525226bc7900985da1dacd537_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- Sample261026-yle7nsgs6t
- SHA256 4e03e85589e068753357556d971c1764c0727446922945e3038003bca1dce8df
- MD5 920eb84525226bc7900985da1dacd537
- SHA1 79cc396a161f47bb4a9711959cb3eb7e06387ab4
- SHA512 1fc8f73f05c50341dbee64d0ca41a0850eb9b05c7876cd5eba4fb0ffb73d3b778f9877997729015a9412e2a6aebec32dbb1ce9c8335dbd2cba3967f3e6cdd41d
- SSDEEP 6144:94ZaN1cb90oOTFmIFLq0cvnXhLCqj2EFNirGcEOkCybEaQRuy8K:9rNOb9+sIF+0cvnXhLCqEsOkxHy
- TLSH T112C48D29B6E0C076C4B79578C4A186B6FAB17832372459CFA394075A1F337E2BA3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-25_920eb84525226bc7900985da1dacd537_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-25_920eb84525226bc7900985da1dacd537_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- SHA256 4e03e85589e068753357556d971c1764c0727446922945e3038003bca1dce8df
- MD5 920eb84525226bc7900985da1dacd537
- SHA1 79cc396a161f47bb4a9711959cb3eb7e06387ab4
- SHA512 1fc8f73f05c50341dbee64d0ca41a0850eb9b05c7876cd5eba4fb0ffb73d3b778f9877997729015a9412e2a6aebec32dbb1ce9c8335dbd2cba3967f3e6cdd41d
- SSDEEP 6144:94ZaN1cb90oOTFmIFLq0cvnXhLCqj2EFNirGcEOkCybEaQRuy8K:9rNOb9+sIF+0cvnXhLCqEsOkxHy
- TLSH T112C48D29B6E0C076C4B79578C4A186B6FAB17832372459CFA394075A1F337E2BA3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Custom signature
UPX dump on OEP (original entry point)
Executes dropped EXE
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
Drops file in System32 directory