General
- Target 2026-04-18_7adb3e4eb45e9adedef0e39d3f40140c_amadey_coinminer_elex_smoke-loader_stop
- Size 766KB
- Sample260418-14ae9agy6p
- SHA256 10f46c7014d2da8a763518454a0558f49939947dd03c14fc16b727a41fbde608
- MD5 7adb3e4eb45e9adedef0e39d3f40140c
- SHA1 1c65c17864e993a40602c95c594bd70943a2ead4
- SHA512 ac7941b0ab7c449fe06ab4b96961a4500fb70e8bd4d3756a2d34d097422f4948fa905226ae509091b065d90017f6f6faf181cf67e13d543a5985709c4afde604
- SSDEEP 12288:WSvO2x9mONvKRwLSFtsOkx2LIa+ya5FAQjU/Liw:VvO2xJKRw2kOkx2LFRvcUV
- TLSH T102F45A31E241C03AD0A74576C6FA0BAFE564BD25531155CBA3C43A6A2FB36D2BE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-04-18_7adb3e4eb45e9adedef0e39d3f40140c_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260130-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-18_7adb3e4eb45e9adedef0e39d3f40140c_amadey_coinminer_elex_smoke-loader_stop
- Size 766KB
- SHA256 10f46c7014d2da8a763518454a0558f49939947dd03c14fc16b727a41fbde608
- MD5 7adb3e4eb45e9adedef0e39d3f40140c
- SHA1 1c65c17864e993a40602c95c594bd70943a2ead4
- SHA512 ac7941b0ab7c449fe06ab4b96961a4500fb70e8bd4d3756a2d34d097422f4948fa905226ae509091b065d90017f6f6faf181cf67e13d543a5985709c4afde604
- SSDEEP 12288:WSvO2x9mONvKRwLSFtsOkx2LIa+ya5FAQjU/Liw:VvO2xJKRw2kOkx2LFRvcUV
- TLSH T102F45A31E241C03AD0A74576C6FA0BAFE564BD25531155CBA3C43A6A2FB36D2BE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Custom signature
UPX dump on OEP (original entry point)
Executes dropped EXE
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
Drops file in System32 directory