General
- Target 2026-04-22_3086288171808fcdbfc1b1f6345518a6_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- Sample260422-elyjgacw3s
- SHA256 74674eafd2c6241ff9921643f045606776c87b60a5baccc5a5fdf460a9c60c56
- MD5 3086288171808fcdbfc1b1f6345518a6
- SHA1 190a4e4c1a521d7847ba71f0cc00fc1cac0e4331
- SHA512 645cbeae3c65aa7e7b15a42f0528ba1cedc1d843cacb7d3829f4c0333c3b2189cf0f936cf3325cbd48edce51bda932a375fdcffa9d0ffc6a217b02dfc458a3af
- SSDEEP 6144:EcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:ESvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T198D45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-04-22_3086288171808fcdbfc1b1f6345518a6_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260130-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-22_3086288171808fcdbfc1b1f6345518a6_amadey_coinminer_elex_smoke-loader_stop
- Size 640KB
- SHA256 74674eafd2c6241ff9921643f045606776c87b60a5baccc5a5fdf460a9c60c56
- MD5 3086288171808fcdbfc1b1f6345518a6
- SHA1 190a4e4c1a521d7847ba71f0cc00fc1cac0e4331
- SHA512 645cbeae3c65aa7e7b15a42f0528ba1cedc1d843cacb7d3829f4c0333c3b2189cf0f936cf3325cbd48edce51bda932a375fdcffa9d0ffc6a217b02dfc458a3af
- SSDEEP 6144:EcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:ESvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T198D45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory