General
- Target 2026-07-12_11a2f9e80e0ca96c88a83555328941c0_amadey_coinminer_elex_remcos_smoke-loader
- Size 576KB
- Sample260712-rl1eaadv6v
- SHA256 b630eb0da84e8e7776d199864ea887c79b91ed29c8231a5d145f77f1e38e1799
- MD5 11a2f9e80e0ca96c88a83555328941c0
- SHA1 0cdbcd4e1d68c7659748800bc7a1f42e5dba9753
- SHA512 71725956e63c83dfaeb7445d8abcb1d47c44f3d840fc8763184aa0344897b97e79530dfd61688fae9feba741f0b8103fdf60771e5ac5bce11b6df4615560772c
- SSDEEP 12288:fqXUHkUXe39sOkx2LIan5FAQjU/Lik8CQ3K:fjHPOSOkx2LFscUQPK
- TLSH T162C47C31E201C03AD1A74572C6FE0BAFA568BD24431562C7A3D479762FF72D2AA3171E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-12_11a2f9e80e0ca96c88a83555328941c0_amadey_coinminer_elex_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-12_11a2f9e80e0ca96c88a83555328941c0_amadey_coinminer_elex_remcos_smoke-loader
- Size 576KB
- SHA256 b630eb0da84e8e7776d199864ea887c79b91ed29c8231a5d145f77f1e38e1799
- MD5 11a2f9e80e0ca96c88a83555328941c0
- SHA1 0cdbcd4e1d68c7659748800bc7a1f42e5dba9753
- SHA512 71725956e63c83dfaeb7445d8abcb1d47c44f3d840fc8763184aa0344897b97e79530dfd61688fae9feba741f0b8103fdf60771e5ac5bce11b6df4615560772c
- SSDEEP 12288:fqXUHkUXe39sOkx2LIan5FAQjU/Lik8CQ3K:fjHPOSOkx2LFscUQPK
- TLSH T162C47C31E201C03AD1A74572C6FE0BAFA568BD24431562C7A3D479762FF72D2AA3171E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory