General
- Target 2026-04-15_72109e0a8807ee7ca646fb4f997471f7_amadey_coinminer_elex_smoke-loader_stop
- Size 638KB
- Sample260415-szxe8aet8w
- SHA256 99c3c42cd3d36a3274dd6973d1afabb0cd78a0d509efbc6c5f2df690123bf9ba
- MD5 72109e0a8807ee7ca646fb4f997471f7
- SHA1 0147f25279b4d9dbf9ec3081efea50c722f66f70
- SHA512 51aaf794a25ae42b3e5f583e4177b63bdeed7f11531e4375ff795ea1d5e05a1fbd0fef0abdb90be1efd2dd23e89318ee5c6eb6c11ba5178938adcd7c0e1f9e62
- SSDEEP 6144:3cTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8KU5R2:3SvO2x9mONvKRwLSFtsOkx2LIa+ya5g
- TLSH T157D46B26B6908037C0B74675C5B64BAAFAB5BC21631186CFA380761A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-04-15_72109e0a8807ee7ca646fb4f997471f7_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260130-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-15_72109e0a8807ee7ca646fb4f997471f7_amadey_coinminer_elex_smoke-loader_stop
- Size 638KB
- SHA256 99c3c42cd3d36a3274dd6973d1afabb0cd78a0d509efbc6c5f2df690123bf9ba
- MD5 72109e0a8807ee7ca646fb4f997471f7
- SHA1 0147f25279b4d9dbf9ec3081efea50c722f66f70
- SHA512 51aaf794a25ae42b3e5f583e4177b63bdeed7f11531e4375ff795ea1d5e05a1fbd0fef0abdb90be1efd2dd23e89318ee5c6eb6c11ba5178938adcd7c0e1f9e62
- SSDEEP 6144:3cTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8KU5R2:3SvO2x9mONvKRwLSFtsOkx2LIa+ya5g
- TLSH T157D46B26B6908037C0B74675C5B64BAAFAB5BC21631186CFA380761A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Custom signature
UPX dump on OEP (original entry point)
Executes dropped EXE
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
Drops file in System32 directory