General
- Target 2026-06-26_48cf7af362fc804fc97bba782f4c5d93_amadey_coinminer_elex_emotet_remcos_smoke-loader_stop
- Size 10.4MB
- Sample260629-tvfscabs6j
- SHA256 0104e97246da40d98117276a1dddc7e99baad73e14566ba9564085519d878956
- MD5 48cf7af362fc804fc97bba782f4c5d93
- SHA1 3e354847691ca67f1a7303f80f0dc97f0c0c04f2
- SHA512 0a7b3f7c4362daefedcf4d89ca26fc7670a3b2c30b3bda931b3146d062c83240eda418eff49cddbfb569070c55c4e3d8e95e1e6a7cb31acb28e1884f79168de2
- SSDEEP 196608:XZGmuLsR2/LGPLCXOKODxH5qFlXS47dV2MANpvrjVbEKGWIoSB:XZGnLsREJLODBWlX3d+NpvdHIom
- TLSH T10EB61233A1908066D289193956736F3879F897595EB0CCB3F7E4ECE22D624E1E72710A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-26_48cf7af362fc804fc97bba782f4c5d93_amadey_coinminer_elex_emotet_remcos_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-26_48cf7af362fc804fc97bba782f4c5d93_amadey_coinminer_elex_emotet_remcos_smoke-loader_stop.exe
Resource
win11ltsc2024-20260629-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-26_48cf7af362fc804fc97bba782f4c5d93_amadey_coinminer_elex_emotet_remcos_smoke-loader_stop
- Size 10.4MB
- SHA256 0104e97246da40d98117276a1dddc7e99baad73e14566ba9564085519d878956
- MD5 48cf7af362fc804fc97bba782f4c5d93
- SHA1 3e354847691ca67f1a7303f80f0dc97f0c0c04f2
- SHA512 0a7b3f7c4362daefedcf4d89ca26fc7670a3b2c30b3bda931b3146d062c83240eda418eff49cddbfb569070c55c4e3d8e95e1e6a7cb31acb28e1884f79168de2
- SSDEEP 196608:XZGmuLsR2/LGPLCXOKODxH5qFlXS47dV2MANpvrjVbEKGWIoSB:XZGnLsREJLODBWlX3d+NpvdHIom
- TLSH T10EB61233A1908066D289193956736F3879F897595EB0CCB3F7E4ECE22D624E1E72710A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Suspicious use of NtSetInformationThreadHideFromDebugger