General
- Target 2026-05-10_fded595fde3ebbf0cab2a1fa019c4357_amadey_coinminer_elex_smoke-loader_stop
- Size 761KB
- Sample260510-bbpxssfx61
- SHA256 d1deec09abc358459886e54887c3ba79e61571448ca86494acda6009ebb2b21e
- MD5 fded595fde3ebbf0cab2a1fa019c4357
- SHA1 4111d1aaad6bc289a71b3a308001db09e78d5732
- SHA512 54dd1774d91b778d8edb657770379eab175f8780afc2be05fa7695ff43aa391d03a7aa106b1fb53cb411358b4d168f83e88841c9e154341b37c73068bc4358c5
- SSDEEP 12288:MSvO2x9mONvKRwLSFtsOkxHya5hYIW0p98B:/vO2xJKRw2kOkxSkW298B
- TLSH T144F49E35A2808036C0B34532C6F94AABF9797D35631565CBA3843B662F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-05-10_fded595fde3ebbf0cab2a1fa019c4357_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260130-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-10_fded595fde3ebbf0cab2a1fa019c4357_amadey_coinminer_elex_smoke-loader_stop
- Size 761KB
- SHA256 d1deec09abc358459886e54887c3ba79e61571448ca86494acda6009ebb2b21e
- MD5 fded595fde3ebbf0cab2a1fa019c4357
- SHA1 4111d1aaad6bc289a71b3a308001db09e78d5732
- SHA512 54dd1774d91b778d8edb657770379eab175f8780afc2be05fa7695ff43aa391d03a7aa106b1fb53cb411358b4d168f83e88841c9e154341b37c73068bc4358c5
- SSDEEP 12288:MSvO2x9mONvKRwLSFtsOkxHya5hYIW0p98B:/vO2xJKRw2kOkxSkW298B
- TLSH T144F49E35A2808036C0B34532C6F94AABF9797D35631565CBA3843B662F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Custom signature
UPX dump on OEP (original entry point)
Executes dropped EXE
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
Drops file in System32 directory