General
- Target 2026-07-17_ccb6a9f742d8952cc871cae6869d998d_amadey_coinminer_elex_emotet_remcos_smoke-loader_stop
- Size 10.4MB
- Sample260718-cg13pagv4x
- SHA256 c3d32454e4b0c2c0c2d649fe6e991c101f94584dd1b7c486c51abe7fecf11a6b
- MD5 ccb6a9f742d8952cc871cae6869d998d
- SHA1 de4941e260aa7c4fbed419c647815df2c0da594c
- SHA512 d0763660c79f626ee20b32e33605668f141796e0babc3ac08ba25f92fd10e5bcf55c55d3d337a79a9c4a253617fe911789d8ba1a7f3d88e2e523e0f0f3693068
- SSDEEP 196608:XZGmuvsR2/LGPLCXOKODxH5qFlXS47dV2MANpvrjVbEKGWIoS1:XZGnvsREJLODBWlX3d+NpvdHIoQ
- TLSH T135B61233A1908066D289193956736F3879F8975D5EB0CCB3F7E4ECE22D624E1E72710A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-17_ccb6a9f742d8952cc871cae6869d998d_amadey_coinminer_elex_emotet_remcos_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-17_ccb6a9f742d8952cc871cae6869d998d_amadey_coinminer_elex_emotet_remcos_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-17_ccb6a9f742d8952cc871cae6869d998d_amadey_coinminer_elex_emotet_remcos_smoke-loader_stop
- Size 10.4MB
- SHA256 c3d32454e4b0c2c0c2d649fe6e991c101f94584dd1b7c486c51abe7fecf11a6b
- MD5 ccb6a9f742d8952cc871cae6869d998d
- SHA1 de4941e260aa7c4fbed419c647815df2c0da594c
- SHA512 d0763660c79f626ee20b32e33605668f141796e0babc3ac08ba25f92fd10e5bcf55c55d3d337a79a9c4a253617fe911789d8ba1a7f3d88e2e523e0f0f3693068
- SSDEEP 196608:XZGmuvsR2/LGPLCXOKODxH5qFlXS47dV2MANpvrjVbEKGWIoS1:XZGnvsREJLODBWlX3d+NpvdHIoQ
- TLSH T135B61233A1908066D289193956736F3879F8975D5EB0CCB3F7E4ECE22D624E1E72710A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Suspicious use of NtSetInformationThreadHideFromDebugger