General
- Target 2026-06-01_e03c6b297291e8940173cbcb162fbc9e_amadey_coinminer_elex_smoke-loader_stop
- Size 766KB
- Sample260601-hrx2nset7v
- SHA256 2bf0164ee3a43320c11a1863f80a9a4a03b567df7a42541750e5a6f9e390afd9
- MD5 e03c6b297291e8940173cbcb162fbc9e
- SHA1 d371c0e680aee4e54c292fd1fcf5ff4c111ea5ff
- SHA512 861c15a102f3cfed68e67caf0db507b822d1d90a95000ee2329017e1903596d61b36e42697b4c72e5321a201937b5d7e9cee276d54f9188ae7d975c8373f0a05
- SSDEEP 12288:qSvO2x9mONvKRwLSFtsOkx2LIa+ya5FAQjU/Liw:xvO2xJKRw2kOkx2LFRvcUV
- TLSH T1F2F45A31E241C03AD0A74576C6FA0BAFE564BD25531155CBA3C43A6A2FB36D2BE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-06-01_e03c6b297291e8940173cbcb162fbc9e_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-01_e03c6b297291e8940173cbcb162fbc9e_amadey_coinminer_elex_smoke-loader_stop
- Size 766KB
- SHA256 2bf0164ee3a43320c11a1863f80a9a4a03b567df7a42541750e5a6f9e390afd9
- MD5 e03c6b297291e8940173cbcb162fbc9e
- SHA1 d371c0e680aee4e54c292fd1fcf5ff4c111ea5ff
- SHA512 861c15a102f3cfed68e67caf0db507b822d1d90a95000ee2329017e1903596d61b36e42697b4c72e5321a201937b5d7e9cee276d54f9188ae7d975c8373f0a05
- SSDEEP 12288:qSvO2x9mONvKRwLSFtsOkx2LIa+ya5FAQjU/Liw:xvO2xJKRw2kOkx2LFRvcUV
- TLSH T1F2F45A31E241C03AD0A74576C6FA0BAFE564BD25531155CBA3C43A6A2FB36D2BE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory