General
- Target 2026-07-19_7b24ec2c97100183c3c6f653b97c9b0d_amadey_coinminer_elex_remcos_smoke-loader
- Size 618KB
- Sample260719-kcm92aat4v
- SHA256 dbb4e6f9c585577ba8a3bb8db4944638baf7e981082f17a3c54c4efbf82e55da
- MD5 7b24ec2c97100183c3c6f653b97c9b0d
- SHA1 57099371d44a1d96ee68c8ecbb5aa610d8e38dfd
- SHA512 74fc99c3f2a00e154595ddbaf4de80a8f7ff8bdc18ac26c3b0844b5ec46af0c976ec65c2f56972146c9f4a220feaf259db8990f006a27fd156600053b840116d
- SSDEEP 12288:/qXUHkUXe39sOkx2LIan5FAQjU/Lik8CQ3uEW:/jHPOSOkx2LFscUQPxW
- TLSH T1F8D47C31E201C03AD0A74576C6FE0BAFA5687D25431662C7A3D479362FF72D2AA3171E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-19_7b24ec2c97100183c3c6f653b97c9b0d_amadey_coinminer_elex_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-19_7b24ec2c97100183c3c6f653b97c9b0d_amadey_coinminer_elex_remcos_smoke-loader
- Size 618KB
- SHA256 dbb4e6f9c585577ba8a3bb8db4944638baf7e981082f17a3c54c4efbf82e55da
- MD5 7b24ec2c97100183c3c6f653b97c9b0d
- SHA1 57099371d44a1d96ee68c8ecbb5aa610d8e38dfd
- SHA512 74fc99c3f2a00e154595ddbaf4de80a8f7ff8bdc18ac26c3b0844b5ec46af0c976ec65c2f56972146c9f4a220feaf259db8990f006a27fd156600053b840116d
- SSDEEP 12288:/qXUHkUXe39sOkx2LIan5FAQjU/Lik8CQ3uEW:/jHPOSOkx2LFscUQPxW
- TLSH T1F8D47C31E201C03AD0A74576C6FE0BAFA5687D25431662C7A3D479362FF72D2AA3171E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Custom signature
UPX dump on OEP (original entry point)
Executes dropped EXE
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
Drops file in System32 directory