General
- Target 2026-05-30_7da610dfb3edffacd9912e2a2bea5659_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- Sample260530-rm2czaex7x
- SHA256 18ba99276245b3e35efc80533f057419958b4a8d46b44407f75d2e86311568db
- MD5 7da610dfb3edffacd9912e2a2bea5659
- SHA1 b843578c83e3b78e0f54a6461ac9cf9c6756940a
- SHA512 a5bb28580871fe63f367badc7a44869cd8d2f7fb3254686a79554bc5b41530c059cef6e6438819015a3439a4d3d4c9f692b1275053d27530af4ee26fa981a0c0
- SSDEEP 6144:46UE71cqQEoMr5C2iKLJChYSvL+8xPFxirGcEOkCybEaQRXr9HNdvOa+y8K:4O7OqQs42iKFChYSvL+8AsOkx2LIa+y
- TLSH T1C2C46C26B6A0D076C4B79574C4A28BA6FFB1742227244BCFA39047561F637E2BE3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-05-30_7da610dfb3edffacd9912e2a2bea5659_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-30_7da610dfb3edffacd9912e2a2bea5659_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- SHA256 18ba99276245b3e35efc80533f057419958b4a8d46b44407f75d2e86311568db
- MD5 7da610dfb3edffacd9912e2a2bea5659
- SHA1 b843578c83e3b78e0f54a6461ac9cf9c6756940a
- SHA512 a5bb28580871fe63f367badc7a44869cd8d2f7fb3254686a79554bc5b41530c059cef6e6438819015a3439a4d3d4c9f692b1275053d27530af4ee26fa981a0c0
- SSDEEP 6144:46UE71cqQEoMr5C2iKLJChYSvL+8xPFxirGcEOkCybEaQRXr9HNdvOa+y8K:4O7OqQs42iKFChYSvL+8AsOkx2LIa+y
- TLSH T1C2C46C26B6A0D076C4B79574C4A28BA6FFB1742227244BCFA39047561F637E2BE3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Custom signature
UPX dump on OEP (original entry point)
Executes dropped EXE
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
Drops file in System32 directory