General
- Target 2026-07-08_70cbf916939b8a84c3516f8a01a970a9_amadey_coinminer_elex_remcos_smoke-loader
- Size 618KB
- Sample260708-pylesagy6r
- SHA256 0ac4f7d2a1b29296b46216945b05cf242135cb4324736a390cbd232eb44d7b5a
- MD5 70cbf916939b8a84c3516f8a01a970a9
- SHA1 06d6be13202619a2fc32209a31b2d051e7bdbf2c
- SHA512 6fe1dbc0312867b12539a0473d4c9931c080a08488855d01909070648de82f39bf831708a1e2c54af3da948e394d7642a59ad78bdf983fc14ba91491367f5975
- SSDEEP 12288:6qXUHkUXe39sOkx2LIan5FAQjU/Lik8CQ3uEW:6jHPOSOkx2LFscUQPxW
- TLSH T12BD47C31E201C03AD0A74576C6FE0BAFA5687D25431662C7A3D479362FF72D2AA3171E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-08_70cbf916939b8a84c3516f8a01a970a9_amadey_coinminer_elex_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_70cbf916939b8a84c3516f8a01a970a9_amadey_coinminer_elex_remcos_smoke-loader
- Size 618KB
- SHA256 0ac4f7d2a1b29296b46216945b05cf242135cb4324736a390cbd232eb44d7b5a
- MD5 70cbf916939b8a84c3516f8a01a970a9
- SHA1 06d6be13202619a2fc32209a31b2d051e7bdbf2c
- SHA512 6fe1dbc0312867b12539a0473d4c9931c080a08488855d01909070648de82f39bf831708a1e2c54af3da948e394d7642a59ad78bdf983fc14ba91491367f5975
- SSDEEP 12288:6qXUHkUXe39sOkx2LIan5FAQjU/Lik8CQ3uEW:6jHPOSOkx2LFscUQPxW
- TLSH T12BD47C31E201C03AD0A74576C6FE0BAFA5687D25431662C7A3D479362FF72D2AA3171E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory