General
- Target 2026-05-07_a720c897b20c70ac2aebe3d17b78dea9_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- Sample260507-gae9vsfv31
- SHA256 0d5c764d1f45b43995b8ef059afe903e967a9a2da51ec8e71e0355f7241ad471
- MD5 a720c897b20c70ac2aebe3d17b78dea9
- SHA1 c3b278bac8411219c2cc8150c5a0e524123c0acd
- SHA512 eac30dcee34b086ae557dfca73b2cf551629d36e9a0ca34b7d3ce76bd77750aba3dba9182ca3f374338c89ff0a630b4b1bc60e22961b7d3dd3c391d45474a422
- SSDEEP 6144:c4ZaN1cb90oOTFmIFLq0cvnXhLCqj2EFNirGcEOkCybEaQRuy8K:crNOb9+sIF+0cvnXhLCqEsOkxHy
- TLSH T1E6C48D29B6E0C076C4B79578C4A186B6FAB17832372459CFA394075A1F337E2BA3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-05-07_a720c897b20c70ac2aebe3d17b78dea9_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260130-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-07_a720c897b20c70ac2aebe3d17b78dea9_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- SHA256 0d5c764d1f45b43995b8ef059afe903e967a9a2da51ec8e71e0355f7241ad471
- MD5 a720c897b20c70ac2aebe3d17b78dea9
- SHA1 c3b278bac8411219c2cc8150c5a0e524123c0acd
- SHA512 eac30dcee34b086ae557dfca73b2cf551629d36e9a0ca34b7d3ce76bd77750aba3dba9182ca3f374338c89ff0a630b4b1bc60e22961b7d3dd3c391d45474a422
- SSDEEP 6144:c4ZaN1cb90oOTFmIFLq0cvnXhLCqj2EFNirGcEOkCybEaQRuy8K:crNOb9+sIF+0cvnXhLCqEsOkxHy
- TLSH T1E6C48D29B6E0C076C4B79578C4A186B6FAB17832372459CFA394075A1F337E2BA3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory