Analysis
- max time kernel
150s - max time network
145s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260710-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
23/07/2026, 23:40
Static task
static1
Behavioral task
behavioral1
Sample
2026-07-23_fc7f52338c358c29b23e6660e82b9e13_amadey_coinminer_elex_remcos_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-23_fc7f52338c358c29b23e6660e82b9e13_amadey_coinminer_elex_remcos_smoke-loader_stop.exe
Resource
win11ltsc2024-20260710-en
1 signatures
150 seconds
General
- Target 2026-07-23_fc7f52338c358c29b23e6660e82b9e13_amadey_coinminer_elex_remcos_smoke-loader_stop.exe
- Size 1.6MB
- Sample260723-3n8dfsdj4x
- SHA256 5ac412186d16d5ee097cd489a44b291eaf4e3f8ba605b578fda5ead0d252048d
- MD5 fc7f52338c358c29b23e6660e82b9e13
- SHA1 b1ac4052081e594eba6537f1aefa24ee5f2cbdb5
- SHA512 2695f4c29deb6fece4d7291c2256b5d0a8c62a48a9af1b6ee852cf233278bc9a0322717673060c6aaf904756d4bd8a6c31625f909f88fbece6fcf8fe59444a09
- SSDEEP 24576:sUkXlwINFcv+E66h3usxmllYZZLrICAM+9EZx78jn8v8MULEKmDmoZps9mZ:sUkXlnNcbmllYZZLsCRDCnM0LFkc6
- TLSH T16E75CE2272F08076D2660030CE669F6966BBFDAE2938490363937F4FFE71911DD26E15
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-07-23_fc7f52338c358c29b23e6660e82b9e13_amadey_coinminer_elex_remcos_smoke-loader_stop.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-07-23_fc7f52338c358c29b23e6660e82b9e13_amadey_coinminer_elex_remcos_smoke-loader_stop.exe"C:\Users\Admin\AppData\Local\Temp\2026-07-23_fc7f52338c358c29b23e6660e82b9e13_amadey_coinminer_elex_remcos_smoke-loader_stop.exe"1⤵
- System Location Discovery: System Language Discovery
PID:4616