General
- Target 2026-04-16_38556c5803bcc65e0e2b17fca8efd1d9_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- Sample260416-ml5xjsf17x
- SHA256 75c7a3e4bc8592c5646aa930cb0b4f380d1d1de8621151c4242f6b3bcc360f51
- MD5 38556c5803bcc65e0e2b17fca8efd1d9
- SHA1 6b947c5092be9f096ee6b484e71a6d82a84e12e9
- SHA512 c8f1d76c552fa76438aadb942aab01e8bb0afaaa47a917857d45dce343713d62cd5c2af8d3a285dbe7098b40b01424ad13cbc81f899f5f46b43c5d43c1d21eef
- SSDEEP 6144:S4ZaN1cb90oOTFmIFLq0cvnXhLCqj2EFNirGcEOkCybEaQRuy8K:SrNOb9+sIF+0cvnXhLCqEsOkxHy
- TLSH T1D2C48D29B6E0C076C4B79578C4A186B6FAB17832372459CFA394075A1F337E2BA3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-04-16_38556c5803bcc65e0e2b17fca8efd1d9_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260130-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-16_38556c5803bcc65e0e2b17fca8efd1d9_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- SHA256 75c7a3e4bc8592c5646aa930cb0b4f380d1d1de8621151c4242f6b3bcc360f51
- MD5 38556c5803bcc65e0e2b17fca8efd1d9
- SHA1 6b947c5092be9f096ee6b484e71a6d82a84e12e9
- SHA512 c8f1d76c552fa76438aadb942aab01e8bb0afaaa47a917857d45dce343713d62cd5c2af8d3a285dbe7098b40b01424ad13cbc81f899f5f46b43c5d43c1d21eef
- SSDEEP 6144:S4ZaN1cb90oOTFmIFLq0cvnXhLCqj2EFNirGcEOkCybEaQRuy8K:SrNOb9+sIF+0cvnXhLCqEsOkxHy
- TLSH T1D2C48D29B6E0C076C4B79578C4A186B6FAB17832372459CFA394075A1F337E2BA3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory