General
- Target 2026-04-24_c76d0cd0e7910ae094aa0c3bbded4d30_amadey_coinminer_elex_smoke-loader_stop
- Size 525KB
- Sample260425-cwf13ahs2n
- SHA256 d1f3a5fc38f3d54e400d5e2c78af7b6705892090f2b7060df63a7183ef983038
- MD5 c76d0cd0e7910ae094aa0c3bbded4d30
- SHA1 b9a38cb7171e794a36d410ae9770c6cf30fb8e67
- SHA512 fb87bdfd463333cfba2fb7a355d19909b75ade8cfeba188a21cfd41c0b7041215d9c6a04f4d08f87324c9090d92b38cd8c4ac978805992d6199c883cf8cbabae
- SSDEEP 6144:UcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K:USvO2x9mONvKRwLSFtsOkx2LIa+y
- TLSH T16EB47D2AB6A0D076C4779579C4A257BAFBB1742137204ACFA390475A1F237E2BE3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-04-24_c76d0cd0e7910ae094aa0c3bbded4d30_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260130-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-24_c76d0cd0e7910ae094aa0c3bbded4d30_amadey_coinminer_elex_smoke-loader_stop
- Size 525KB
- SHA256 d1f3a5fc38f3d54e400d5e2c78af7b6705892090f2b7060df63a7183ef983038
- MD5 c76d0cd0e7910ae094aa0c3bbded4d30
- SHA1 b9a38cb7171e794a36d410ae9770c6cf30fb8e67
- SHA512 fb87bdfd463333cfba2fb7a355d19909b75ade8cfeba188a21cfd41c0b7041215d9c6a04f4d08f87324c9090d92b38cd8c4ac978805992d6199c883cf8cbabae
- SSDEEP 6144:UcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K:USvO2x9mONvKRwLSFtsOkx2LIa+y
- TLSH T16EB47D2AB6A0D076C4779579C4A257BAFBB1742137204ACFA390475A1F237E2BE3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory