General
- Target 2026-10-28_551e033efe63837c3ee98415b7f8393a_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- Sample261030-e1jnvsaw2r
- SHA256 16f9d9b65dfa3b6e8a7c1f1fd39d733c4a3d2044fbbec99a11d32bef3c5d477d
- MD5 551e033efe63837c3ee98415b7f8393a
- SHA1 b781c3e065c771fef760c6a6b7de9d2c873fff7a
- SHA512 443af8e4ac7458b597da2c10315372ec0e79f16c543b4d5f1a5e47e95005cdabc81375a6223a718c166662127a9949b1026d7d6b2773b071fbe6aae6fac76a1b
- SSDEEP 6144:dUJJuV1cdhIoA7vJ0CLoCgvDLe4AmFvirGcEOkCybEaQRuy8K:dYsVOdhElvkCgvDLe4usOkxHy
- TLSH T1C5C48D29B6D0C036C5B39574C4A186BAEAB17432372549CFA3D5475A0F337E2BA7930E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-28_551e033efe63837c3ee98415b7f8393a_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-28_551e033efe63837c3ee98415b7f8393a_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- SHA256 16f9d9b65dfa3b6e8a7c1f1fd39d733c4a3d2044fbbec99a11d32bef3c5d477d
- MD5 551e033efe63837c3ee98415b7f8393a
- SHA1 b781c3e065c771fef760c6a6b7de9d2c873fff7a
- SHA512 443af8e4ac7458b597da2c10315372ec0e79f16c543b4d5f1a5e47e95005cdabc81375a6223a718c166662127a9949b1026d7d6b2773b071fbe6aae6fac76a1b
- SSDEEP 6144:dUJJuV1cdhIoA7vJ0CLoCgvDLe4AmFvirGcEOkCybEaQRuy8K:dYsVOdhElvkCgvDLe4usOkxHy
- TLSH T1C5C48D29B6D0C036C5B39574C4A186BAEAB17432372549CFA3D5475A0F337E2BA7930E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory