General
- Target 2026-05-02_bfe93c0afe6b30c32d0daf82747d4525_amadey_coinminer_elex_smoke-loader_stop
- Size 525KB
- Sample260502-qch8zagw71
- SHA256 708ae7f7142d5bc401f8164a5905cb4fc97f6804ec7abb834be3df711ae2a015
- MD5 bfe93c0afe6b30c32d0daf82747d4525
- SHA1 206f883bada20172e5751b87a793d0d5593b6b86
- SHA512 9688277b1c5a7554fe7e7aa3cefe17c84d8d32c779df97ec33634711bff30392208ccf3d65ad5f32f5371ce94fc46ec46786e1de9c05e94cc5f209c135e41190
- SSDEEP 6144:xcTgav1cdCTuoPbgwmOLJvKRhLSFXdFwirGcEOkCybEaQRXr9HNdvOaey8K:xSvO2x9mONvKRhLSFtsOkx2LIaey
- TLSH T114B47D2AB6A0D076C4779579C4A257BAFBB1742137204ACFA390475A1F237E2BE3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-05-02_bfe93c0afe6b30c32d0daf82747d4525_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260130-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-02_bfe93c0afe6b30c32d0daf82747d4525_amadey_coinminer_elex_smoke-loader_stop
- Size 525KB
- SHA256 708ae7f7142d5bc401f8164a5905cb4fc97f6804ec7abb834be3df711ae2a015
- MD5 bfe93c0afe6b30c32d0daf82747d4525
- SHA1 206f883bada20172e5751b87a793d0d5593b6b86
- SHA512 9688277b1c5a7554fe7e7aa3cefe17c84d8d32c779df97ec33634711bff30392208ccf3d65ad5f32f5371ce94fc46ec46786e1de9c05e94cc5f209c135e41190
- SSDEEP 6144:xcTgav1cdCTuoPbgwmOLJvKRhLSFXdFwirGcEOkCybEaQRXr9HNdvOaey8K:xSvO2x9mONvKRhLSFtsOkx2LIaey
- TLSH T114B47D2AB6A0D076C4779579C4A257BAFBB1742137204ACFA390475A1F237E2BE3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory