General
- Target 2026-05-03_5a21041e04e098b947d22d24dbe6c4da_amadey_coinminer_elex_smoke-loader_stop
- Size 638KB
- Sample260503-vbx3yshs5m
- SHA256 8d47a76ea3a12c3ca5a3196e4925587b09307eed303fd53bd4fddddcb9089216
- MD5 5a21041e04e098b947d22d24dbe6c4da
- SHA1 b0d1b3b860d2546543d37df32b5fb93d038a3478
- SHA512 bf28beee0e69feaf7cc8772d83ce9595e83be8a838e1178f290b90e662c375fb192741a7c3a07cdd7f87cf22e27949c40a1b5432a27dfbd9f1a37881bc9f9816
- SSDEEP 6144:ZcTgav1cdCTuoPbgwmOLJvKRhLSFXdFwirGcEOkCybEaQRXr9HNdvOaey8KK5R2:ZSvO2x9mONvKRhLSFtsOkx2LIaeyk5g
- TLSH T193D46B26B6908037C0B74675C5B64BAAFAB5BC21631186CFA380761A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-05-03_5a21041e04e098b947d22d24dbe6c4da_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260130-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-03_5a21041e04e098b947d22d24dbe6c4da_amadey_coinminer_elex_smoke-loader_stop
- Size 638KB
- SHA256 8d47a76ea3a12c3ca5a3196e4925587b09307eed303fd53bd4fddddcb9089216
- MD5 5a21041e04e098b947d22d24dbe6c4da
- SHA1 b0d1b3b860d2546543d37df32b5fb93d038a3478
- SHA512 bf28beee0e69feaf7cc8772d83ce9595e83be8a838e1178f290b90e662c375fb192741a7c3a07cdd7f87cf22e27949c40a1b5432a27dfbd9f1a37881bc9f9816
- SSDEEP 6144:ZcTgav1cdCTuoPbgwmOLJvKRhLSFXdFwirGcEOkCybEaQRXr9HNdvOaey8KK5R2:ZSvO2x9mONvKRhLSFtsOkx2LIaeyk5g
- TLSH T193D46B26B6908037C0B74675C5B64BAAFAB5BC21631186CFA380761A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory