General
- Target 2026-05-10_d5f984fcc7280321410c5be8f1c4854a_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- Sample260511-adjccsgv4x
- SHA256 431a66bfb9b62d9d6a3e859c38819aeec51664c2056c61e19a5ee7a33996c056
- MD5 d5f984fcc7280321410c5be8f1c4854a
- SHA1 8bdc880307df2ed8cf4e0dc48b5bdce8c5c5b85e
- SHA512 0a1e6092346e34fda3cedf5cde55829f5c2e121d191da2ede5c686ab2dccb6a9771e59cec31a009f4f2363949956ae69fbdebe952042d3870ee57bb7dfece403
- SSDEEP 6144:Sgye71cE4poJTqvpQLXNKFyLWD1nFairGcEOkCybEaQRuy8K:SI7OE4kopQzNKFyLWDHsOkxHy
- TLSH T124C48C2AB690C076C4B7D534C5E197AAEAB17432372449CFA3D0075A1F237E2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-05-10_d5f984fcc7280321410c5be8f1c4854a_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260130-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-10_d5f984fcc7280321410c5be8f1c4854a_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- SHA256 431a66bfb9b62d9d6a3e859c38819aeec51664c2056c61e19a5ee7a33996c056
- MD5 d5f984fcc7280321410c5be8f1c4854a
- SHA1 8bdc880307df2ed8cf4e0dc48b5bdce8c5c5b85e
- SHA512 0a1e6092346e34fda3cedf5cde55829f5c2e121d191da2ede5c686ab2dccb6a9771e59cec31a009f4f2363949956ae69fbdebe952042d3870ee57bb7dfece403
- SSDEEP 6144:Sgye71cE4poJTqvpQLXNKFyLWD1nFairGcEOkCybEaQRuy8K:SI7OE4kopQzNKFyLWDHsOkxHy
- TLSH T124C48C2AB690C076C4B7D534C5E197AAEAB17432372449CFA3D0075A1F237E2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Custom signature
UPX dump on OEP (original entry point)
Executes dropped EXE
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
Drops file in System32 directory