General
- Target 2026-05-06_354c571d22fa6724af8de8eec20b35c3_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- Sample260506-2tpb4afx3m
- SHA256 f3d531c594d2db64ab10df3fb487d8abb9059c5b777f6783713deecd60f42d2b
- MD5 354c571d22fa6724af8de8eec20b35c3
- SHA1 7da0b32ab108988378a417d8960568dadf989baa
- SHA512 ec7475886b576af1cee89513054b7876888461b5724afcaffff78a8daee40542542b52d4052abbbb34eb7a8cc4108b6474f06c5c1f4f2eada212806dd36ef5b2
- SSDEEP 6144:zgye71cE4poJTqvpQLXNKFyLWD1nFairGcEOkCybEaQRuy8K:zI7OE4kopQzNKFyLWDHsOkxHy
- TLSH T12AC48C2AB690C076C4B7D534C5E197AAEAB17432372449CFA7D0075A1F237E2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-05-06_354c571d22fa6724af8de8eec20b35c3_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260130-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-06_354c571d22fa6724af8de8eec20b35c3_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- SHA256 f3d531c594d2db64ab10df3fb487d8abb9059c5b777f6783713deecd60f42d2b
- MD5 354c571d22fa6724af8de8eec20b35c3
- SHA1 7da0b32ab108988378a417d8960568dadf989baa
- SHA512 ec7475886b576af1cee89513054b7876888461b5724afcaffff78a8daee40542542b52d4052abbbb34eb7a8cc4108b6474f06c5c1f4f2eada212806dd36ef5b2
- SSDEEP 6144:zgye71cE4poJTqvpQLXNKFyLWD1nFairGcEOkCybEaQRuy8K:zI7OE4kopQzNKFyLWDHsOkxHy
- TLSH T12AC48C2AB690C076C4B7D534C5E197AAEAB17432372449CFA7D0075A1F237E2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Custom signature
UPX dump on OEP (original entry point)
Executes dropped EXE
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
Drops file in System32 directory