General
- Target 2026-04-17_55177dc72f4666644bc8a8211a6a6665_amadey_coinminer_elex_smoke-loader_stop
- Size 766KB
- Sample260417-m429dact3n
- SHA256 f1aed5c32cc68b51b3edcc82875568073c8a6ec4f34b08801a09aeb9c381b7fb
- MD5 55177dc72f4666644bc8a8211a6a6665
- SHA1 1cc1218661ff0a44878f42681b95fa287995c489
- SHA512 915ac2a0c69fc584a2356aa4209fc517ef06b706c16b27b9f51189d24041da0bd1ed6dea26a1534a880809767565fa9b87573f69fc4f53a38b14735a3c9169c2
- SSDEEP 12288:YSvO2x9mONvKRwLSFtsOkx2LIa+ya5FAQjU/Liw:zvO2xJKRw2kOkx2LFRvcUV
- TLSH T165F45A31E241C03AD0A74576C6FA0BAFE564BD25531155CBA3C43A6A2FB36D2BE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-04-17_55177dc72f4666644bc8a8211a6a6665_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260130-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-17_55177dc72f4666644bc8a8211a6a6665_amadey_coinminer_elex_smoke-loader_stop
- Size 766KB
- SHA256 f1aed5c32cc68b51b3edcc82875568073c8a6ec4f34b08801a09aeb9c381b7fb
- MD5 55177dc72f4666644bc8a8211a6a6665
- SHA1 1cc1218661ff0a44878f42681b95fa287995c489
- SHA512 915ac2a0c69fc584a2356aa4209fc517ef06b706c16b27b9f51189d24041da0bd1ed6dea26a1534a880809767565fa9b87573f69fc4f53a38b14735a3c9169c2
- SSDEEP 12288:YSvO2x9mONvKRwLSFtsOkx2LIa+ya5FAQjU/Liw:zvO2xJKRw2kOkx2LFRvcUV
- TLSH T165F45A31E241C03AD0A74576C6FA0BAFE564BD25531155CBA3C43A6A2FB36D2BE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory