General
- Target 2026-05-07_10c9a37aa44c7472003faa9be346dadf_amadey_coinminer_elex_smoke-loader_stop
- Size 766KB
- Sample260507-bbdjrscy7v
- SHA256 6a8206d7c2d7687c30b4da93703a24581f74b05184f47e6b9cdc5ce07327e7d1
- MD5 10c9a37aa44c7472003faa9be346dadf
- SHA1 ec5a959c6e499d018e5124276bd4ff187786d1ed
- SHA512 d88a79ab9eb992c8afddd84f508839b5f5dec1def56bd9c1f5d4f73645ba5584e74b6ebab3c94558436f3264954756b9145ca7c274edf17d596e33a87bb9c674
- SSDEEP 12288:8SvO2x9mONvKRwLSFtsOkx2LIa+ya5FAQjU/Liw:PvO2xJKRw2kOkx2LFRvcUV
- TLSH T1D6F45A31E241C03AD0A74576C6FA0BAFE564BD25531155CBA3C43A6A2FB36D2BE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-05-07_10c9a37aa44c7472003faa9be346dadf_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260130-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-07_10c9a37aa44c7472003faa9be346dadf_amadey_coinminer_elex_smoke-loader_stop
- Size 766KB
- SHA256 6a8206d7c2d7687c30b4da93703a24581f74b05184f47e6b9cdc5ce07327e7d1
- MD5 10c9a37aa44c7472003faa9be346dadf
- SHA1 ec5a959c6e499d018e5124276bd4ff187786d1ed
- SHA512 d88a79ab9eb992c8afddd84f508839b5f5dec1def56bd9c1f5d4f73645ba5584e74b6ebab3c94558436f3264954756b9145ca7c274edf17d596e33a87bb9c674
- SSDEEP 12288:8SvO2x9mONvKRwLSFtsOkx2LIa+ya5FAQjU/Liw:PvO2xJKRw2kOkx2LFRvcUV
- TLSH T1D6F45A31E241C03AD0A74576C6FA0BAFE564BD25531155CBA3C43A6A2FB36D2BE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Custom signature
UPX dump on OEP (original entry point)
Executes dropped EXE
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
Drops file in System32 directory