General
- Target 2026-04-19_a5be425cfe7785e9dc07eff5f1454e4e_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- Sample260419-pp7awsav6l
- SHA256 b11e073a9ceab46bc6440890dfc85b2cb13b8b5a4d42f09533efcea34050793b
- MD5 a5be425cfe7785e9dc07eff5f1454e4e
- SHA1 b803a25d22948aba213cee7fcc6ba1dd36919f0d
- SHA512 24f88da8620c61d4466ae837a37add78abfa4fa8221e714ced92fd1870f1e5a9475c7dd42fa05b667db5d2c2502c101f16d4bd444fda30f00ab6d3950ac0c329
- SSDEEP 6144:V4ZaN1cb90oOTFmIFLq0cvnXhLCqj2EFNirGcEOkCybEaQRuy8K:VrNOb9+sIF+0cvnXhLCqEsOkxHy
- TLSH T170C48D29B6E0C076C4B79578C4A186B6FAB17832372459CFA394075A1F337E2BA3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-04-19_a5be425cfe7785e9dc07eff5f1454e4e_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260130-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-19_a5be425cfe7785e9dc07eff5f1454e4e_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- SHA256 b11e073a9ceab46bc6440890dfc85b2cb13b8b5a4d42f09533efcea34050793b
- MD5 a5be425cfe7785e9dc07eff5f1454e4e
- SHA1 b803a25d22948aba213cee7fcc6ba1dd36919f0d
- SHA512 24f88da8620c61d4466ae837a37add78abfa4fa8221e714ced92fd1870f1e5a9475c7dd42fa05b667db5d2c2502c101f16d4bd444fda30f00ab6d3950ac0c329
- SSDEEP 6144:V4ZaN1cb90oOTFmIFLq0cvnXhLCqj2EFNirGcEOkCybEaQRuy8K:VrNOb9+sIF+0cvnXhLCqEsOkxHy
- TLSH T170C48D29B6E0C076C4B79578C4A186B6FAB17832372459CFA394075A1F337E2BA3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory