General
- Target 2026-05-31_e51f0e93bb3cb94b8636104e0fb54138_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- Sample260531-cb62ragv3x
- SHA256 305dca2d21436d1eac5c0e0b45282073afcb6e5cd3040b7e2d51775aa3b1453a
- MD5 e51f0e93bb3cb94b8636104e0fb54138
- SHA1 8ec402072ea279cfe1f51089c8e2ee6a517c86b3
- SHA512 63e0f6b5998b600f9b986054071ca5bfd86f3eca47877ebc2765e6b6017fc958eec8f439ac7c0d8dbc0e43fe7d8a2b26b5ed4acc2cf1f9cc6366ccafc73c9a0c
- SSDEEP 6144:Jgye71cE4poJTqvpQLXNKFyLWD1nFairGcEOkCybEaQRuy8K:JI7OE4kopQzNKFyLWDHsOkxHy
- TLSH T126C48C2AB690C076C4B7D534C5E197AAEAB17432372449CFA3D0075A1F237E2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-05-31_e51f0e93bb3cb94b8636104e0fb54138_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-31_e51f0e93bb3cb94b8636104e0fb54138_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- SHA256 305dca2d21436d1eac5c0e0b45282073afcb6e5cd3040b7e2d51775aa3b1453a
- MD5 e51f0e93bb3cb94b8636104e0fb54138
- SHA1 8ec402072ea279cfe1f51089c8e2ee6a517c86b3
- SHA512 63e0f6b5998b600f9b986054071ca5bfd86f3eca47877ebc2765e6b6017fc958eec8f439ac7c0d8dbc0e43fe7d8a2b26b5ed4acc2cf1f9cc6366ccafc73c9a0c
- SSDEEP 6144:Jgye71cE4poJTqvpQLXNKFyLWD1nFairGcEOkCybEaQRuy8K:JI7OE4kopQzNKFyLWDHsOkxHy
- TLSH T126C48C2AB690C076C4B7D534C5E197AAEAB17432372449CFA3D0075A1F237E2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Custom signature
UPX dump on OEP (original entry point)
Executes dropped EXE
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
Drops file in System32 directory