General
- Target 2026-10-26_b3e15f75d9e424f7e0fa538133b477e2_amadey_coinminer_elex_smoke-loader_stop
- Size 511KB
- Sample261027-krvbwssxfx
- SHA256 9d4193abba983bc51aac935181bdf6605bd2c70726fd697642eb7654b7e0a2be
- MD5 b3e15f75d9e424f7e0fa538133b477e2
- SHA1 b39498a6e3260a1096653461d2e9b8dfaf7002f5
- SHA512 417164ef16625d138cead666ec90d40aa5ad14730c6507b2914aaca8e2f41d25fa938fdab1980865157763599e56ff7a823de4e875c65b591a602fdf09690323
- SSDEEP 6144:dcTgav1cdCTuoPbgwmOLJvKRILSFvdFDcEOkCybEaQRXr9HNdvOax5Rv0:dSvO2x9mONvKRILSFnOkx2LIax5F0
- TLSH T14DB45C26F6908036C4B34575C5F64BAAFAB4BC21631156CBA3943A6A1F737D2BD3130E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-26_b3e15f75d9e424f7e0fa538133b477e2_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-26_b3e15f75d9e424f7e0fa538133b477e2_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-26_b3e15f75d9e424f7e0fa538133b477e2_amadey_coinminer_elex_smoke-loader_stop
- Size 511KB
- SHA256 9d4193abba983bc51aac935181bdf6605bd2c70726fd697642eb7654b7e0a2be
- MD5 b3e15f75d9e424f7e0fa538133b477e2
- SHA1 b39498a6e3260a1096653461d2e9b8dfaf7002f5
- SHA512 417164ef16625d138cead666ec90d40aa5ad14730c6507b2914aaca8e2f41d25fa938fdab1980865157763599e56ff7a823de4e875c65b591a602fdf09690323
- SSDEEP 6144:dcTgav1cdCTuoPbgwmOLJvKRILSFvdFDcEOkCybEaQRXr9HNdvOax5Rv0:dSvO2x9mONvKRILSFnOkx2LIax5F0
- TLSH T14DB45C26F6908036C4B34575C5F64BAAFAB4BC21631156CBA3943A6A1F737D2BD3130E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory