General

  • Target
    2026-07-21_0c6fdf0d23e41f1358e27519342ee966_amadey_coinminer_elex_emotet_glassworm_remcos_smoke-loader_stop
  • Size 10.7MB
  • Sample260721-s8gfcszbrc
  • SHA256 d7ef4732917a2e0741b2244c6a2a5c555fd74263479dda863eb4cb63bec8f275
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10

Malware Config

Targets

    • Target
      2026-07-21_0c6fdf0d23e41f1358e27519342ee966_amadey_coinminer_elex_emotet_glassworm_remcos_smoke-loader_stop
    • Size 10.7MB
    • SHA256 d7ef4732917a2e0741b2244c6a2a5c555fd74263479dda863eb4cb63bec8f275
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    9/10
    • Detects Windows executables referencing non-Windows User-Agents

    • UPX dump on OEP (original entry point)

    • Loads dropped DLL

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v16

Tasks