General
- Target 2026-07-14_4493cce02b6ddea3670ba073d96d89e0_amadey_coinminer_elex_remcos_smoke-loader
- Size 618KB
- Sample260714-em5deags2t
- SHA256 f7d3b27cde99b1f17987691412ec0d77b650a22bb846d659d6119162c1396ad6
- MD5 4493cce02b6ddea3670ba073d96d89e0
- SHA1 cc151cc667f1e57485517ea25f9153fd39317358
- SHA512 3b79ee14a0e3985b23bc21c9ca9fe10bbe94fd25ae6cd0aa593d0b8f9537329d39549e2844721a3948f00c83cf6e1c0ee84e60e7e7edc35dd82a11d9594cf391
- SSDEEP 12288:dqXUHkUXe39sOkx2LIan5FAQjU/Lik8CQ3uEW:djHPOSOkx2LFscUQPxW
- TLSH T1C6D47C31E201C03AD0A74576C6FE0BAFA5687D25431662C7A3D479362FF72D2AA3171E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-14_4493cce02b6ddea3670ba073d96d89e0_amadey_coinminer_elex_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-14_4493cce02b6ddea3670ba073d96d89e0_amadey_coinminer_elex_remcos_smoke-loader
- Size 618KB
- SHA256 f7d3b27cde99b1f17987691412ec0d77b650a22bb846d659d6119162c1396ad6
- MD5 4493cce02b6ddea3670ba073d96d89e0
- SHA1 cc151cc667f1e57485517ea25f9153fd39317358
- SHA512 3b79ee14a0e3985b23bc21c9ca9fe10bbe94fd25ae6cd0aa593d0b8f9537329d39549e2844721a3948f00c83cf6e1c0ee84e60e7e7edc35dd82a11d9594cf391
- SSDEEP 12288:dqXUHkUXe39sOkx2LIan5FAQjU/Lik8CQ3uEW:djHPOSOkx2LFscUQPxW
- TLSH T1C6D47C31E201C03AD0A74576C6FE0BAFA5687D25431662C7A3D479362FF72D2AA3171E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory