General
- Target 2026-10-28_019e4bd7d600578d1adea1803e1d7295_amadey_coinminer_elex_smoke-loader_stop
- Size 766KB
- Sample261030-nrj3psc15j
- SHA256 2380891b73f57f363153919c225c426b427fa626f4bf21adca1fc15519dfbc4a
- MD5 019e4bd7d600578d1adea1803e1d7295
- SHA1 379dad53819e5dc363235eb458ab08b264f6d5ff
- SHA512 9c7049f23e81c4165c92bf3de0b33ffbe75d0cfb736dfa56e2e1fd47d51af40bf4351497f01d124cd8ee4871dcb623659e4abed1d703c44fb15c73ff3e77275c
- SSDEEP 12288:rSvO2x9mONvKRwLSFtsOkx2LIa+ya5FAQjU/Liw:evO2xJKRw2kOkx2LFRvcUV
- TLSH T1E3F45A31E241C03AD0A74576C6FA0BAFE564BD25531155CBA3C43A6A2FB36D2BE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-28_019e4bd7d600578d1adea1803e1d7295_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-28_019e4bd7d600578d1adea1803e1d7295_amadey_coinminer_elex_smoke-loader_stop
- Size 766KB
- SHA256 2380891b73f57f363153919c225c426b427fa626f4bf21adca1fc15519dfbc4a
- MD5 019e4bd7d600578d1adea1803e1d7295
- SHA1 379dad53819e5dc363235eb458ab08b264f6d5ff
- SHA512 9c7049f23e81c4165c92bf3de0b33ffbe75d0cfb736dfa56e2e1fd47d51af40bf4351497f01d124cd8ee4871dcb623659e4abed1d703c44fb15c73ff3e77275c
- SSDEEP 12288:rSvO2x9mONvKRwLSFtsOkx2LIa+ya5FAQjU/Liw:evO2xJKRw2kOkx2LFRvcUV
- TLSH T1E3F45A31E241C03AD0A74576C6FA0BAFE564BD25531155CBA3C43A6A2FB36D2BE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory