General
- Target 2026-04-15_18fcd0655aaf3f804d350b7af4cf4859_amadey_coinminer_elex_smoke-loader_stop
- Size 638KB
- Sample260415-qectzaez5m
- SHA256 ccee175dd71b3408dac02f9cbd64f449e96e7ade35712f8d791fc5236ed8b4e7
- MD5 18fcd0655aaf3f804d350b7af4cf4859
- SHA1 11a7ab71121d2969d0b3083d616ac1b86b8989f4
- SHA512 17b8c80fe66304c1225083e99fddc3e1c5c206e2853fa615adfc386664703cc2e67db0a68d3d641f758d44f9856fbc736094838668187a87246130e82c0b6b4e
- SSDEEP 6144:PcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8KU5R2:PSvO2x9mONvKRwLSFtsOkx2LIa+ya5g
- TLSH T113D46B26B6908037C0B74675C5B64BAAFAB5BC21631186CFA380761A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-04-15_18fcd0655aaf3f804d350b7af4cf4859_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260130-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-15_18fcd0655aaf3f804d350b7af4cf4859_amadey_coinminer_elex_smoke-loader_stop
- Size 638KB
- SHA256 ccee175dd71b3408dac02f9cbd64f449e96e7ade35712f8d791fc5236ed8b4e7
- MD5 18fcd0655aaf3f804d350b7af4cf4859
- SHA1 11a7ab71121d2969d0b3083d616ac1b86b8989f4
- SHA512 17b8c80fe66304c1225083e99fddc3e1c5c206e2853fa615adfc386664703cc2e67db0a68d3d641f758d44f9856fbc736094838668187a87246130e82c0b6b4e
- SSDEEP 6144:PcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8KU5R2:PSvO2x9mONvKRwLSFtsOkx2LIa+ya5g
- TLSH T113D46B26B6908037C0B74675C5B64BAAFAB5BC21631186CFA380761A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory