General
- Target 2026-05-18_9a844c9112e3d676574e890ca42867bb_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- Sample260518-b4actae17w
- SHA256 967808e09dc6694c3a4f362d084c4fa991b620ebebb8ab41bc55c378240eb0b1
- MD5 9a844c9112e3d676574e890ca42867bb
- SHA1 d8881cef8110309224cb9a706856116a4df757f4
- SHA512 b3a21f458c5f6a12acd1c930be00f49d8cdccf9370df5224012d1dfcc03e6b30e3b196380ed628b36a076aef0070d6e97439ccf962be0c6d51b7b2e43ec9f7a6
- SSDEEP 6144:7gye71cE4poJTqvpQLXNKFyLWD1nFairGcEOkCybEaQRuy8K:7I7OE4kopQzNKFyLWDHsOkxHy
- TLSH T1C8C48C2AB690C076C4B7D534C5E197AAEAB17432372449CFA3D0075A1F237E2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-05-18_9a844c9112e3d676574e890ca42867bb_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-18_9a844c9112e3d676574e890ca42867bb_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win11-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-18_9a844c9112e3d676574e890ca42867bb_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- SHA256 967808e09dc6694c3a4f362d084c4fa991b620ebebb8ab41bc55c378240eb0b1
- MD5 9a844c9112e3d676574e890ca42867bb
- SHA1 d8881cef8110309224cb9a706856116a4df757f4
- SHA512 b3a21f458c5f6a12acd1c930be00f49d8cdccf9370df5224012d1dfcc03e6b30e3b196380ed628b36a076aef0070d6e97439ccf962be0c6d51b7b2e43ec9f7a6
- SSDEEP 6144:7gye71cE4poJTqvpQLXNKFyLWD1nFairGcEOkCybEaQRuy8K:7I7OE4kopQzNKFyLWDHsOkxHy
- TLSH T1C8C48C2AB690C076C4B7D534C5E197AAEAB17432372449CFA3D0075A1F237E2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory