General
- Target 2026-04-18_4bffa2d91a434cb04d83cdadcc93a80c_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- Sample260418-b2qa9aew4t
- SHA256 a2499fd173a776feab353f44297268ebc11f268843d92427aaa19d4bc5b4b43f
- MD5 4bffa2d91a434cb04d83cdadcc93a80c
- SHA1 95eb15fab2096717060e8bc259ad9997bc33c00b
- SHA512 0b80732b1aea6c33e847b8cc21c09628fb27a735aca04c4f27b01312803e5cc457fb370501727e6417bd687acc44bf198899b9bb28cb675e89add65638e9b6a0
- SSDEEP 6144:QUJJuV1cdhIoA7vJ0CLoCgvDLe4AmFvirGcEOkCybEaQRuy8K:QYsVOdhElvkCgvDLe4usOkxHy
- TLSH T119C48D29B6D0C036C5B39574C4A186BAEAB17432372549CFA3D5475A0F337E2BA7930E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-04-18_4bffa2d91a434cb04d83cdadcc93a80c_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260130-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-18_4bffa2d91a434cb04d83cdadcc93a80c_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win11-20260130-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-18_4bffa2d91a434cb04d83cdadcc93a80c_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- SHA256 a2499fd173a776feab353f44297268ebc11f268843d92427aaa19d4bc5b4b43f
- MD5 4bffa2d91a434cb04d83cdadcc93a80c
- SHA1 95eb15fab2096717060e8bc259ad9997bc33c00b
- SHA512 0b80732b1aea6c33e847b8cc21c09628fb27a735aca04c4f27b01312803e5cc457fb370501727e6417bd687acc44bf198899b9bb28cb675e89add65638e9b6a0
- SSDEEP 6144:QUJJuV1cdhIoA7vJ0CLoCgvDLe4AmFvirGcEOkCybEaQRuy8K:QYsVOdhElvkCgvDLe4usOkxHy
- TLSH T119C48D29B6D0C036C5B39574C4A186BAEAB17432372549CFA3D5475A0F337E2BA7930E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10- Custom signature
UPX dump on OEP (original entry point)
Executes dropped EXE
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
Drops file in System32 directory