General
- Target 2026-10-26_58c62fa5a38e54cf0497a5135ae30b0b_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- Sample261027-vb22xaea88
- SHA256 459dda1e0e400b08c857ab28576a9269ae2c2cb47306ab4a96e51e27f0528bd3
- MD5 58c62fa5a38e54cf0497a5135ae30b0b
- SHA1 d1122339291e9045a107fc8e0bdff337344fd29c
- SHA512 e855a79da1acb3715e0cefc8b59e1ff812b30e60697d46bb0966b5ea9c5e42030326a07d0bc615abe5972ef426c74a37e23419ce2ffd27a5aa34bee062fef264
- SSDEEP 6144:sUJJuV1cdhIoA7vJ0CLoCgvDLe4AmFvirGcEOkCybEaQRuy8K:sYsVOdhElvkCgvDLe4usOkxHy
- TLSH T189C48D29B6D0C036C5B39574C4A186BAEAB17432372549CFA3D5475A0F337E2BA7930E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-26_58c62fa5a38e54cf0497a5135ae30b0b_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-26_58c62fa5a38e54cf0497a5135ae30b0b_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- SHA256 459dda1e0e400b08c857ab28576a9269ae2c2cb47306ab4a96e51e27f0528bd3
- MD5 58c62fa5a38e54cf0497a5135ae30b0b
- SHA1 d1122339291e9045a107fc8e0bdff337344fd29c
- SHA512 e855a79da1acb3715e0cefc8b59e1ff812b30e60697d46bb0966b5ea9c5e42030326a07d0bc615abe5972ef426c74a37e23419ce2ffd27a5aa34bee062fef264
- SSDEEP 6144:sUJJuV1cdhIoA7vJ0CLoCgvDLe4AmFvirGcEOkCybEaQRuy8K:sYsVOdhElvkCgvDLe4usOkxHy
- TLSH T189C48D29B6D0C036C5B39574C4A186BAEAB17432372549CFA3D5475A0F337E2BA7930E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory