General
- Target 2026-07-19_7de5500132c8fb7efb7fe72e0ba27e5b_amadey_coinminer_elex_remcos_smoke-loader
- Size 618KB
- Sample260719-lde6gsa16w
- SHA256 6482c0bee0bfd7949337670077434b59d5db485591b10533b83f5c03d0f52263
- MD5 7de5500132c8fb7efb7fe72e0ba27e5b
- SHA1 85942c83effb259327e5d380d8e2caf4f3674114
- SHA512 8f15291c918a276501c6904d1a727dd23e6fc0ba18beb8c60b26e494d9d5ec60a3033a337dc7148f1907d35045efcea799ac6405fcb2cf067901b82ee258bda7
- SSDEEP 12288:OqXUHkUXe39sOkx2LIan5FAQjU/Lik8CQ3uEW:OjHPOSOkx2LFscUQPxW
- TLSH T1E0D47C31E201C03AD0A74576C6FE0BAFA5687D25431662C7A3D479362FF72D2AA3171E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-19_7de5500132c8fb7efb7fe72e0ba27e5b_amadey_coinminer_elex_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-19_7de5500132c8fb7efb7fe72e0ba27e5b_amadey_coinminer_elex_remcos_smoke-loader
- Size 618KB
- SHA256 6482c0bee0bfd7949337670077434b59d5db485591b10533b83f5c03d0f52263
- MD5 7de5500132c8fb7efb7fe72e0ba27e5b
- SHA1 85942c83effb259327e5d380d8e2caf4f3674114
- SHA512 8f15291c918a276501c6904d1a727dd23e6fc0ba18beb8c60b26e494d9d5ec60a3033a337dc7148f1907d35045efcea799ac6405fcb2cf067901b82ee258bda7
- SSDEEP 12288:OqXUHkUXe39sOkx2LIan5FAQjU/Lik8CQ3uEW:OjHPOSOkx2LFscUQPxW
- TLSH T1E0D47C31E201C03AD0A74576C6FE0BAFA5687D25431662C7A3D479362FF72D2AA3171E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10- Custom signature
UPX dump on OEP (original entry point)
Executes dropped EXE
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
Drops file in System32 directory