General
- Target 2026-06-28_ecbf3eb62d3d492579c6ebdf5cda6c60_amadey_coinminer_elex_emotet_remcos_smoke-loader_stop
- Size 10.4MB
- Sample260628-wrfpaaaz4z
- SHA256 c09ce40a0580f688763da1d45b897bd106c0c5083172f9c46fa647e3a745f352
- MD5 ecbf3eb62d3d492579c6ebdf5cda6c60
- SHA1 ff9cdd7433ef3b707d1eccd60d078745419e1310
- SHA512 06457086d5d9f1729eabde83ef4125de9bcf0d5e36b550c5d2a30d95bb7dd79619242a5e72cacad8847e6a312b4b45b62318838e5bb0b78becc1acc1c1f43667
- SSDEEP 196608:XZGmumsR2/LGPLCXOKODxH5qFlXS47dV2MANpvrjVbEKGWIoSg:XZGnmsREJLODBWlX3d+NpvdHIoP
- TLSH T127B61233A1908066D289193956736F3879F8975D5EB0CCB3F7E4ECE22D624E1E72710A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-28_ecbf3eb62d3d492579c6ebdf5cda6c60_amadey_coinminer_elex_emotet_remcos_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-28_ecbf3eb62d3d492579c6ebdf5cda6c60_amadey_coinminer_elex_emotet_remcos_smoke-loader_stop.exe
Resource
win11ltsc2024-20260617-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-28_ecbf3eb62d3d492579c6ebdf5cda6c60_amadey_coinminer_elex_emotet_remcos_smoke-loader_stop
- Size 10.4MB
- SHA256 c09ce40a0580f688763da1d45b897bd106c0c5083172f9c46fa647e3a745f352
- MD5 ecbf3eb62d3d492579c6ebdf5cda6c60
- SHA1 ff9cdd7433ef3b707d1eccd60d078745419e1310
- SHA512 06457086d5d9f1729eabde83ef4125de9bcf0d5e36b550c5d2a30d95bb7dd79619242a5e72cacad8847e6a312b4b45b62318838e5bb0b78becc1acc1c1f43667
- SSDEEP 196608:XZGmumsR2/LGPLCXOKODxH5qFlXS47dV2MANpvrjVbEKGWIoSg:XZGnmsREJLODBWlX3d+NpvdHIoP
- TLSH T127B61233A1908066D289193956736F3879F8975D5EB0CCB3F7E4ECE22D624E1E72710A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Suspicious use of NtSetInformationThreadHideFromDebugger