General
- Target 2026-05-28_0109dc878b9e4e9f44d2208a65fad4a5_amadey_coinminer_elex_smoke-loader_stop
- Size 761KB
- Sample260528-m591lsdv3j
- SHA256 fb6b16b5b86f8cc5a9ac2680aae3c9c48684a955f5ae1fd4a7b588c5f5bf79cf
- MD5 0109dc878b9e4e9f44d2208a65fad4a5
- SHA1 b6d4a20e28f722e539d3c46dc325e542ebe813eb
- SHA512 f1ee2c8ab7e55eaa67fd19ccc67925c600f774f99a51308677550070c178b4e058215ff21c4a5e1455b1b7aa9d4b6d03896f9e89202113dc9cc38ada8907cef5
- SSDEEP 12288:pSvO2x9mONvKRwLSFtsOkxHya5hYIW0p98B:QvO2xJKRw2kOkxSkW298B
- TLSH T17EF49E35A2808036C0B34532C6F94AABF9797D35631565CBA3843B662F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-05-28_0109dc878b9e4e9f44d2208a65fad4a5_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-28_0109dc878b9e4e9f44d2208a65fad4a5_amadey_coinminer_elex_smoke-loader_stop
- Size 761KB
- SHA256 fb6b16b5b86f8cc5a9ac2680aae3c9c48684a955f5ae1fd4a7b588c5f5bf79cf
- MD5 0109dc878b9e4e9f44d2208a65fad4a5
- SHA1 b6d4a20e28f722e539d3c46dc325e542ebe813eb
- SHA512 f1ee2c8ab7e55eaa67fd19ccc67925c600f774f99a51308677550070c178b4e058215ff21c4a5e1455b1b7aa9d4b6d03896f9e89202113dc9cc38ada8907cef5
- SSDEEP 12288:pSvO2x9mONvKRwLSFtsOkxHya5hYIW0p98B:QvO2xJKRw2kOkxSkW298B
- TLSH T17EF49E35A2808036C0B34532C6F94AABF9797D35631565CBA3843B662F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Custom signature
UPX dump on OEP (original entry point)
Executes dropped EXE
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
Drops file in System32 directory