General
- Target 2026-05-08_36816cb6ed41d781ceb6c863ac4071b8_amadey_coinminer_elex_smoke-loader_stop
- Size 638KB
- Sample260509-aexldabv2r
- SHA256 96e1afbc6b1d88dd37e2ee704679facffea0108286684753b7e9cf3cb1447c7a
- MD5 36816cb6ed41d781ceb6c863ac4071b8
- SHA1 d6c8e139d334c55af7976517b91f6e94e99b420e
- SHA512 2b6263b79cf9361c38ea15487c1796fc918b9aace55f75b24d20b78714e2aece3aca502df12d66e65cb846e36bd6d853e20c9378b67e3fa93562d39640b9da5d
- SSDEEP 6144:ncTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8KU5R2:nSvO2x9mONvKRwLSFtsOkx2LIa+ya5g
- TLSH T1A7D46B26B6908037C0B74675C5B64BAAFAB5BC21631186CFA380761A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-05-08_36816cb6ed41d781ceb6c863ac4071b8_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20250619-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-08_36816cb6ed41d781ceb6c863ac4071b8_amadey_coinminer_elex_smoke-loader_stop
- Size 638KB
- SHA256 96e1afbc6b1d88dd37e2ee704679facffea0108286684753b7e9cf3cb1447c7a
- MD5 36816cb6ed41d781ceb6c863ac4071b8
- SHA1 d6c8e139d334c55af7976517b91f6e94e99b420e
- SHA512 2b6263b79cf9361c38ea15487c1796fc918b9aace55f75b24d20b78714e2aece3aca502df12d66e65cb846e36bd6d853e20c9378b67e3fa93562d39640b9da5d
- SSDEEP 6144:ncTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8KU5R2:nSvO2x9mONvKRwLSFtsOkx2LIa+ya5g
- TLSH T1A7D46B26B6908037C0B74675C5B64BAAFAB5BC21631186CFA380761A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Custom signature
UPX dump on OEP (original entry point)
Executes dropped EXE
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
Drops file in System32 directory