General
- Target 2026-07-28_4a83721c8d6b2e81bf5cfc6759471788_amadey_coinminer_elex_remcos_smoke-loader
- Size 618KB
- Sample260728-tkpx9scl2y
- SHA256 8f4606895d45018e3b5eef5a5ec8a23ea7fdfeeb85cd492d45274836f09ec537
- MD5 4a83721c8d6b2e81bf5cfc6759471788
- SHA1 673fca468da8c3eec17891a98de6c27d5b5ca386
- SHA512 755e3cbe0458c2c487a4627e3a844bdcb90554b8a4417306bbce64c0f0f912495e3a77a563598fa945214cbd13cd00e01316ede1a15562e5b4bc2d49349cd342
- SSDEEP 12288:hqXUHkUXe39sOkx2LIan5FAQjU/Lik8CQ3uEW:hjHPOSOkx2LFscUQPxW
- TLSH T11FD47C31E201C03AD0A74576C6FE0BAFA5687D25431662C7A3D479362FF72D2AA3171E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-28_4a83721c8d6b2e81bf5cfc6759471788_amadey_coinminer_elex_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-28_4a83721c8d6b2e81bf5cfc6759471788_amadey_coinminer_elex_remcos_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-28_4a83721c8d6b2e81bf5cfc6759471788_amadey_coinminer_elex_remcos_smoke-loader
- Size 618KB
- SHA256 8f4606895d45018e3b5eef5a5ec8a23ea7fdfeeb85cd492d45274836f09ec537
- MD5 4a83721c8d6b2e81bf5cfc6759471788
- SHA1 673fca468da8c3eec17891a98de6c27d5b5ca386
- SHA512 755e3cbe0458c2c487a4627e3a844bdcb90554b8a4417306bbce64c0f0f912495e3a77a563598fa945214cbd13cd00e01316ede1a15562e5b4bc2d49349cd342
- SSDEEP 12288:hqXUHkUXe39sOkx2LIan5FAQjU/Lik8CQ3uEW:hjHPOSOkx2LFscUQPxW
- TLSH T11FD47C31E201C03AD0A74576C6FE0BAFA5687D25431662C7A3D479362FF72D2AA3171E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory