General
- Target 2026-07-06_3b856e97ece22bdde11619f832e1011a_amadey_coinminer_elex_remcos_smoke-loader
- Size 576KB
- Sample260707-ex5rxshx4v
- SHA256 e048cb3565c9ce4d86c4630377191b75cd79f5074cf52ab6ff550932aec7ca52
- MD5 3b856e97ece22bdde11619f832e1011a
- SHA1 54ebfbd236677e23ecce3d59d78802b339cebb65
- SHA512 8f6b7a8b9e52d546c35e9bfc82915defb9d5f686d9f9932c057ba22263308c222be4b44e861f8fb5420864969f8298600c5e29732c47fb6a48ec4cdfff3e1631
- SSDEEP 12288:aqXUHkUXe39sOkx2LIan5FAQjU/Lik8CQ3K:ajHPOSOkx2LFscUQPK
- TLSH T103C47C31E201C03AD1A74572C6FE0BAFA568BD24431562C7A3D479762FF72D2AA3171E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-06_3b856e97ece22bdde11619f832e1011a_amadey_coinminer_elex_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_3b856e97ece22bdde11619f832e1011a_amadey_coinminer_elex_remcos_smoke-loader
- Size 576KB
- SHA256 e048cb3565c9ce4d86c4630377191b75cd79f5074cf52ab6ff550932aec7ca52
- MD5 3b856e97ece22bdde11619f832e1011a
- SHA1 54ebfbd236677e23ecce3d59d78802b339cebb65
- SHA512 8f6b7a8b9e52d546c35e9bfc82915defb9d5f686d9f9932c057ba22263308c222be4b44e861f8fb5420864969f8298600c5e29732c47fb6a48ec4cdfff3e1631
- SSDEEP 12288:aqXUHkUXe39sOkx2LIan5FAQjU/Lik8CQ3K:ajHPOSOkx2LFscUQPK
- TLSH T103C47C31E201C03AD1A74572C6FE0BAFA568BD24431562C7A3D479762FF72D2AA3171E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory