General
- Target 2026-07-17_84ff8ca331669fef9646864993fa485a_amadey_coinminer_elex_remcos_smoke-loader
- Size 576KB
- Sample260717-bdjtkact7x
- SHA256 8d560acd1db0d80cd25a7aebe3b808900d4bc46a9b10ededf564ae2ed0534694
- MD5 84ff8ca331669fef9646864993fa485a
- SHA1 76a7e3c26c10e310f67263705c78d14a2b418066
- SHA512 a38579712e428929047beab8f32b63b809c2bf02ed81ed37686db720e015f4164014d5c52710804655f071eb7fbb6cd2b4a76e0ca0c41d2d58f8a512a33d0bb1
- SSDEEP 12288:cqXUHkUXe39sOkx2LIan5FAQjU/Lik8CQ3K:cjHPOSOkx2LFscUQPK
- TLSH T1D0C47C31E201C03AD1A74572C6FE0BAFA568BD24431562C7A3D479762FF72D2AA3171E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-17_84ff8ca331669fef9646864993fa485a_amadey_coinminer_elex_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-17_84ff8ca331669fef9646864993fa485a_amadey_coinminer_elex_remcos_smoke-loader
- Size 576KB
- SHA256 8d560acd1db0d80cd25a7aebe3b808900d4bc46a9b10ededf564ae2ed0534694
- MD5 84ff8ca331669fef9646864993fa485a
- SHA1 76a7e3c26c10e310f67263705c78d14a2b418066
- SHA512 a38579712e428929047beab8f32b63b809c2bf02ed81ed37686db720e015f4164014d5c52710804655f071eb7fbb6cd2b4a76e0ca0c41d2d58f8a512a33d0bb1
- SSDEEP 12288:cqXUHkUXe39sOkx2LIan5FAQjU/Lik8CQ3K:cjHPOSOkx2LFscUQPK
- TLSH T1D0C47C31E201C03AD1A74572C6FE0BAFA568BD24431562C7A3D479762FF72D2AA3171E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory