General
- Target 2026-05-05_edbc240f69379551b40ccfdd18c45b81_amadey_coinminer_elex_smoke-loader_stop
- Size 638KB
- Sample260505-e3s1bact6r
- SHA256 fbd99b1d024cd016127a4d529e3ba74e8a0e2023d5da70c0349f008f913ac975
- MD5 edbc240f69379551b40ccfdd18c45b81
- SHA1 ea2cec6f2f846c5ed3301ca1f7af03ac80406185
- SHA512 379877e4ad4b0b872942ea17cec152aafc4a2394fbc624c2db1644a5dfc332750bd8b71d2e33ff813bf4047babda0a5915ad5e10ff51b5d37a15e165e0db6cf8
- SSDEEP 6144:FcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8KU5R2:FSvO2x9mONvKRwLSFtsOkx2LIa+ya5g
- TLSH T120D46B26B6908037C0B74675C5B64BAAFAB5BC21631186CFA380761A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-05-05_edbc240f69379551b40ccfdd18c45b81_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260130-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-05_edbc240f69379551b40ccfdd18c45b81_amadey_coinminer_elex_smoke-loader_stop
- Size 638KB
- SHA256 fbd99b1d024cd016127a4d529e3ba74e8a0e2023d5da70c0349f008f913ac975
- MD5 edbc240f69379551b40ccfdd18c45b81
- SHA1 ea2cec6f2f846c5ed3301ca1f7af03ac80406185
- SHA512 379877e4ad4b0b872942ea17cec152aafc4a2394fbc624c2db1644a5dfc332750bd8b71d2e33ff813bf4047babda0a5915ad5e10ff51b5d37a15e165e0db6cf8
- SSDEEP 6144:FcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8KU5R2:FSvO2x9mONvKRwLSFtsOkx2LIa+ya5g
- TLSH T120D46B26B6908037C0B74675C5B64BAAFAB5BC21631186CFA380761A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory