General
- Target 2026-04-15_96b433b8b34fa2ea2dbdc7cecc7f3dbf_amadey_coinminer_elex_smoke-loader_stop
- Size 761KB
- Sample260415-2cv4baa19m
- SHA256 6087f3ff18cd27b259336900188a4089c2e51818f4b60e8c6fab2a1c94e3d7e5
- MD5 96b433b8b34fa2ea2dbdc7cecc7f3dbf
- SHA1 a366b2f55166c65b0dd6246cde3fefb36df6b907
- SHA512 4f1c2930190bb4fc8d381206a2711a5d99fa34b8eb296e33bfd974ed0a925283dffb99a2874566cd0c48b3435541969639ecb9db006aa17ac3d226733036ae7c
- SSDEEP 12288:sSvO2x9mONvKRwLSFtsOkxHya5hYIW0p98B:fvO2xJKRw2kOkxSkW298B
- TLSH T1A0F49E35A2808036C0B34532C6F94AABF9797D35631565CBA3843B662F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-04-15_96b433b8b34fa2ea2dbdc7cecc7f3dbf_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260130-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-15_96b433b8b34fa2ea2dbdc7cecc7f3dbf_amadey_coinminer_elex_smoke-loader_stop
- Size 761KB
- SHA256 6087f3ff18cd27b259336900188a4089c2e51818f4b60e8c6fab2a1c94e3d7e5
- MD5 96b433b8b34fa2ea2dbdc7cecc7f3dbf
- SHA1 a366b2f55166c65b0dd6246cde3fefb36df6b907
- SHA512 4f1c2930190bb4fc8d381206a2711a5d99fa34b8eb296e33bfd974ed0a925283dffb99a2874566cd0c48b3435541969639ecb9db006aa17ac3d226733036ae7c
- SSDEEP 12288:sSvO2x9mONvKRwLSFtsOkxHya5hYIW0p98B:fvO2xJKRw2kOkxSkW298B
- TLSH T1A0F49E35A2808036C0B34532C6F94AABF9797D35631565CBA3843B662F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory