General
- Target 2026-10-28_51fd1a396d241375da7333fa3bf39d37_amadey_coinminer_elex_smoke-loader_stop
- Size 766KB
- Sample261030-e9pw8sv1bv
- SHA256 9af811a40f0a2bda7369809e4ad7556f14585ce9af3e61e5988e72af0ee7b6fd
- MD5 51fd1a396d241375da7333fa3bf39d37
- SHA1 13adf1315588d1e090ead2ad278638a2656dc3d0
- SHA512 6dbad9e581b9a9b98247b069570aaa2d2d68d545e86a5f578a34afa2c4789e3ca83d5f68127db33606657dd97a0a5df150c4e346dc8cd01e00d2f801e6cd57ca
- SSDEEP 12288:3SvO2x9mONvKRwLSFtsOkx2LIa+ya5FAQjU/Liw:CvO2xJKRw2kOkx2LFRvcUV
- TLSH T17DF45A31E241C03AD0A74576C6FA0BAFE564BD25531155CBA3C43A6A2FB36D2BE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-28_51fd1a396d241375da7333fa3bf39d37_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-28_51fd1a396d241375da7333fa3bf39d37_amadey_coinminer_elex_smoke-loader_stop
- Size 766KB
- SHA256 9af811a40f0a2bda7369809e4ad7556f14585ce9af3e61e5988e72af0ee7b6fd
- MD5 51fd1a396d241375da7333fa3bf39d37
- SHA1 13adf1315588d1e090ead2ad278638a2656dc3d0
- SHA512 6dbad9e581b9a9b98247b069570aaa2d2d68d545e86a5f578a34afa2c4789e3ca83d5f68127db33606657dd97a0a5df150c4e346dc8cd01e00d2f801e6cd57ca
- SSDEEP 12288:3SvO2x9mONvKRwLSFtsOkx2LIa+ya5FAQjU/Liw:CvO2xJKRw2kOkx2LFRvcUV
- TLSH T17DF45A31E241C03AD0A74576C6FA0BAFE564BD25531155CBA3C43A6A2FB36D2BE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory