General
- Target 2026-10-28_562c9abcb5d6597ce366d37ce50defd9_amadey_coinminer_elex_smoke-loader_stop
- Size 766KB
- Sample261030-exy95swt5n
- SHA256 a409e65862f3b21b8bbb4d5a06fd11dc74f99a9e76cf9b344f857b7db0cb08e6
- MD5 562c9abcb5d6597ce366d37ce50defd9
- SHA1 3e56b70cb4a5a1fce868c863ab4dae0b8b018825
- SHA512 575ca181b8e5243ff393821e0406192fff21c2ba1d46f42a5d4407c7659b9d102cc7523781e126d0c8435bc128fb2bee11f3ae0894145efcb7e79c98d3bfe91a
- SSDEEP 12288:iSvO2x9mONvKRwLSFtsOkx2LIa+ya5FAQjU/Liw:pvO2xJKRw2kOkx2LFRvcUV
- TLSH T178F45A31E241C03AD0A74576C6FA0BAFE564BD25531155CBA3C43A6A2FB36D2BE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-28_562c9abcb5d6597ce366d37ce50defd9_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-28_562c9abcb5d6597ce366d37ce50defd9_amadey_coinminer_elex_smoke-loader_stop
- Size 766KB
- SHA256 a409e65862f3b21b8bbb4d5a06fd11dc74f99a9e76cf9b344f857b7db0cb08e6
- MD5 562c9abcb5d6597ce366d37ce50defd9
- SHA1 3e56b70cb4a5a1fce868c863ab4dae0b8b018825
- SHA512 575ca181b8e5243ff393821e0406192fff21c2ba1d46f42a5d4407c7659b9d102cc7523781e126d0c8435bc128fb2bee11f3ae0894145efcb7e79c98d3bfe91a
- SSDEEP 12288:iSvO2x9mONvKRwLSFtsOkx2LIa+ya5FAQjU/Liw:pvO2xJKRw2kOkx2LFRvcUV
- TLSH T178F45A31E241C03AD0A74576C6FA0BAFE564BD25531155CBA3C43A6A2FB36D2BE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory