General
- Target 2026-06-02_36bab2b6e919747151fab01ef22a51a7_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- Sample260602-gelx7set6v
- SHA256 64a1062fcb78bfb1301583c164ec853a4d215701b50ded6750cb88af7aa027c5
- MD5 36bab2b6e919747151fab01ef22a51a7
- SHA1 468ba948985c4ab8b67ca740de7b184183e6ecc9
- SHA512 43d9b822fec6109a7a75a6ca8471c7c8d2cae5b6bedf840a85ebd1586083690a257c41a6596fa3a30570009a0226806013a7c9ef8d12f34684ae78a500c9f015
- SSDEEP 6144:gWVrC1c2oonALgPLj7vf1LKlyIFVirGcEOkCybEaQRuy8K:gkCO2zVPX7vf1LKlIsOkxHy
- TLSH T110C47C29B690D076C4779574C4A187AAFAB1B432372449CFB3D00B5A1F237E2BA7530E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-06-02_36bab2b6e919747151fab01ef22a51a7_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-02_36bab2b6e919747151fab01ef22a51a7_amadey_coinminer_elex_smoke-loader_stop
- Size 560KB
- SHA256 64a1062fcb78bfb1301583c164ec853a4d215701b50ded6750cb88af7aa027c5
- MD5 36bab2b6e919747151fab01ef22a51a7
- SHA1 468ba948985c4ab8b67ca740de7b184183e6ecc9
- SHA512 43d9b822fec6109a7a75a6ca8471c7c8d2cae5b6bedf840a85ebd1586083690a257c41a6596fa3a30570009a0226806013a7c9ef8d12f34684ae78a500c9f015
- SSDEEP 6144:gWVrC1c2oonALgPLj7vf1LKlyIFVirGcEOkCybEaQRuy8K:gkCO2zVPX7vf1LKlIsOkxHy
- TLSH T110C47C29B690D076C4779574C4A187AAFAB1B432372449CFB3D00B5A1F237E2BA7530E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory