General
- Target 2026-05-10_2d771e14efe17ce9c7a3e62e10b9e312_amadey_coinminer_elex_smoke-loader_stop
- Size 766KB
- Sample260510-ath2jaft3s
- SHA256 787d9d31af976482745f78588121e735feafcc5a74f6f8692de3f36085087b9b
- MD5 2d771e14efe17ce9c7a3e62e10b9e312
- SHA1 4dc964c05a37848ff6eba63f3c498cd923898113
- SHA512 36104cfcc4eb8a090363a338128d52812b5ce7b79c203f6937c293af03d4eada377eb12b3797dafa432270ae2afefe3183643ad781eaf9dcea1c4d378f2e0357
- SSDEEP 12288:BSvO2x9mONvKRwLSFtsOkx2LIa+ya5FAQjU/Liw:IvO2xJKRw2kOkx2LFRvcUV
- TLSH T1EBF45A31E241C03AD0A74576C6FA0BAFE564BD25531155CBA3C43A6A2FB36D2BE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-05-10_2d771e14efe17ce9c7a3e62e10b9e312_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260130-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-10_2d771e14efe17ce9c7a3e62e10b9e312_amadey_coinminer_elex_smoke-loader_stop
- Size 766KB
- SHA256 787d9d31af976482745f78588121e735feafcc5a74f6f8692de3f36085087b9b
- MD5 2d771e14efe17ce9c7a3e62e10b9e312
- SHA1 4dc964c05a37848ff6eba63f3c498cd923898113
- SHA512 36104cfcc4eb8a090363a338128d52812b5ce7b79c203f6937c293af03d4eada377eb12b3797dafa432270ae2afefe3183643ad781eaf9dcea1c4d378f2e0357
- SSDEEP 12288:BSvO2x9mONvKRwLSFtsOkx2LIa+ya5FAQjU/Liw:IvO2xJKRw2kOkx2LFRvcUV
- TLSH T1EBF45A31E241C03AD0A74576C6FA0BAFE564BD25531155CBA3C43A6A2FB36D2BE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory