General
- Target 2026-10-26_efa3410a11fa9bfa517962ddaf76dcde_amadey_coinminer_elex_smoke-loader_stop
- Size 766KB
- Sample261027-db4gash14x
- SHA256 c2557d0b7614d1b37591114feb9f3492dcddc6baefefd0f54fc01509aa8e9733
- MD5 efa3410a11fa9bfa517962ddaf76dcde
- SHA1 4ca3f9fd0c44025175eac28b2e6bf74e75613a18
- SHA512 49cb6d5218d34a8dce8c30ffb2509ba41e67bd2872dc3a73c148426ab8371c088ac8416d9ba30dc4e34bf0a3c62011f80d60d7f23e28bf4be759d442a35ce4c8
- SSDEEP 12288:mSvO2x9mONvKRwLSFtsOkx2LIa+ya5FAQjU/Liw:FvO2xJKRw2kOkx2LFRvcUV
- TLSH T1DAF45A31E241C03AD0A74576C6FA0BAFE564BD25531155CBA3C43A6A2FB36D2BE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-26_efa3410a11fa9bfa517962ddaf76dcde_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-26_efa3410a11fa9bfa517962ddaf76dcde_amadey_coinminer_elex_smoke-loader_stop
- Size 766KB
- SHA256 c2557d0b7614d1b37591114feb9f3492dcddc6baefefd0f54fc01509aa8e9733
- MD5 efa3410a11fa9bfa517962ddaf76dcde
- SHA1 4ca3f9fd0c44025175eac28b2e6bf74e75613a18
- SHA512 49cb6d5218d34a8dce8c30ffb2509ba41e67bd2872dc3a73c148426ab8371c088ac8416d9ba30dc4e34bf0a3c62011f80d60d7f23e28bf4be759d442a35ce4c8
- SSDEEP 12288:mSvO2x9mONvKRwLSFtsOkx2LIa+ya5FAQjU/Liw:FvO2xJKRw2kOkx2LFRvcUV
- TLSH T1DAF45A31E241C03AD0A74576C6FA0BAFE564BD25531155CBA3C43A6A2FB36D2BE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory