General
- Target 2026-07-29_aa930cac594383301946343781efaf1f_amadey_coinminer_elex_remcos_smoke-loader
- Size 618KB
- Sample260729-3zf4cavfkh
- SHA256 cd3ec489f5e3fd6cc61d46ded9434acdf3920677844837b89c1fde11a11f76d5
- MD5 aa930cac594383301946343781efaf1f
- SHA1 7385fa20e75c7a6bd7ebff79093f5888c8e099e7
- SHA512 c816b99e116aba00437a602470604c2f3cf24fde488af2378535355c0553f1a8c93298611a8a9b69f6b35bb8ea981897909b167aba97474280169461213752a8
- SSDEEP 12288:BqXUHkUXe39sOkx2LIan5FAQjU/Lik8CQ3uEW:BjHPOSOkx2LFscUQPxW
- TLSH T126D47C31E201C03AD0A74576C6FE0BAFA5687D25431662C7A3D479362FF72D2AA3171E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-29_aa930cac594383301946343781efaf1f_amadey_coinminer_elex_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_aa930cac594383301946343781efaf1f_amadey_coinminer_elex_remcos_smoke-loader
- Size 618KB
- SHA256 cd3ec489f5e3fd6cc61d46ded9434acdf3920677844837b89c1fde11a11f76d5
- MD5 aa930cac594383301946343781efaf1f
- SHA1 7385fa20e75c7a6bd7ebff79093f5888c8e099e7
- SHA512 c816b99e116aba00437a602470604c2f3cf24fde488af2378535355c0553f1a8c93298611a8a9b69f6b35bb8ea981897909b167aba97474280169461213752a8
- SSDEEP 12288:BqXUHkUXe39sOkx2LIan5FAQjU/Lik8CQ3uEW:BjHPOSOkx2LFscUQPxW
- TLSH T126D47C31E201C03AD0A74576C6FE0BAFA5687D25431662C7A3D479362FF72D2AA3171E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory