General
- Target 2026-10-26_66957d9abc99ffe7854e532b4310044e_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- Sample261027-s2lrhae12p
- SHA256 183a6f477b835296c8f6eb7ce74c9d8ef04dde0710d3b740754d300a26f56013
- MD5 66957d9abc99ffe7854e532b4310044e
- SHA1 1d72019138bc22be1627b439cd557a7ff6aa1407
- SHA512 bbf6662a7dc954cc2718c7d7606d8fb0cc1857a57ef82141769ef908d130500302a81cc2e12ae9fa54c8596f8e03c9942c9debd9de35d9a29ebc068307f9bffc
- SSDEEP 6144:OcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:OSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T169D45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-26_66957d9abc99ffe7854e532b4310044e_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-26_66957d9abc99ffe7854e532b4310044e_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- SHA256 183a6f477b835296c8f6eb7ce74c9d8ef04dde0710d3b740754d300a26f56013
- MD5 66957d9abc99ffe7854e532b4310044e
- SHA1 1d72019138bc22be1627b439cd557a7ff6aa1407
- SHA512 bbf6662a7dc954cc2718c7d7606d8fb0cc1857a57ef82141769ef908d130500302a81cc2e12ae9fa54c8596f8e03c9942c9debd9de35d9a29ebc068307f9bffc
- SSDEEP 6144:OcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:OSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T169D45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory