General
- Target 2026-05-06_60cc908e803d94545fb0990ff4a7c6b4_amadey_coinminer_elex_smoke-loader_stop
- Size 638KB
- Sample260506-b11etsds8n
- SHA256 0766f1fb3fb352241b8472de78a27fe0e056b3e5c53b976b9eb8e5e8a72c7204
- MD5 60cc908e803d94545fb0990ff4a7c6b4
- SHA1 ff79ec65cab646995324586168ee89ccb44c83f9
- SHA512 405b87b174c7afb98f756efdd8febb39d1e7c052243d9bb1b93b7c532fbd2913bdb169c3591e307c346db05ee641e8bce85c0f7210ec3d623c868940dd9d2064
- SSDEEP 6144:JcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8KU5R2:JSvO2x9mONvKRwLSFtsOkx2LIa+ya5g
- TLSH T1B4D46B26B6908037C0B74675C5B64BAAFAB5BC21631186CFA380761A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-05-06_60cc908e803d94545fb0990ff4a7c6b4_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260130-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-06_60cc908e803d94545fb0990ff4a7c6b4_amadey_coinminer_elex_smoke-loader_stop
- Size 638KB
- SHA256 0766f1fb3fb352241b8472de78a27fe0e056b3e5c53b976b9eb8e5e8a72c7204
- MD5 60cc908e803d94545fb0990ff4a7c6b4
- SHA1 ff79ec65cab646995324586168ee89ccb44c83f9
- SHA512 405b87b174c7afb98f756efdd8febb39d1e7c052243d9bb1b93b7c532fbd2913bdb169c3591e307c346db05ee641e8bce85c0f7210ec3d623c868940dd9d2064
- SSDEEP 6144:JcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8KU5R2:JSvO2x9mONvKRwLSFtsOkx2LIa+ya5g
- TLSH T1B4D46B26B6908037C0B74675C5B64BAAFAB5BC21631186CFA380761A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Custom signature
UPX dump on OEP (original entry point)
Executes dropped EXE
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
Drops file in System32 directory