General
- Target 2026-05-09_e5f8c79338e4cfe0f50e876fe6869475_amadey_coinminer_elex_smoke-loader_stop
- Size 638KB
- Sample260509-tptr1sat5v
- SHA256 433e1d1aaf6ecf59698a7cfeab55d656d4bb02f49868e6ed47f9d928f05a9b13
- MD5 e5f8c79338e4cfe0f50e876fe6869475
- SHA1 a4dfe9b3764bb7d1560a1b888264ea1407368251
- SHA512 3bd61656777041925f09418ba263e9e274d67c6e9f8742d77a79d7c79f0d9bb3eef203fa67093d41a97e8ea859bce143ea719cd6c503b3e6a9f20e2a1364784d
- SSDEEP 6144:ncTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8KU5R2:nSvO2x9mONvKRwLSFtsOkx2LIa+ya5g
- TLSH T145D46B26B6908037C0B74675C5B64BAAFAB5BC21631186CFA380761A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-05-09_e5f8c79338e4cfe0f50e876fe6869475_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260130-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-09_e5f8c79338e4cfe0f50e876fe6869475_amadey_coinminer_elex_smoke-loader_stop
- Size 638KB
- SHA256 433e1d1aaf6ecf59698a7cfeab55d656d4bb02f49868e6ed47f9d928f05a9b13
- MD5 e5f8c79338e4cfe0f50e876fe6869475
- SHA1 a4dfe9b3764bb7d1560a1b888264ea1407368251
- SHA512 3bd61656777041925f09418ba263e9e274d67c6e9f8742d77a79d7c79f0d9bb3eef203fa67093d41a97e8ea859bce143ea719cd6c503b3e6a9f20e2a1364784d
- SSDEEP 6144:ncTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8KU5R2:nSvO2x9mONvKRwLSFtsOkx2LIa+ya5g
- TLSH T145D46B26B6908037C0B74675C5B64BAAFAB5BC21631186CFA380761A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory