General
- Target 2026-07-30_d2b823c004ea8df65619fcfb655e8ca5_amadey_coinminer_elex_hawkeye_hijackloader_remcos_smoke-loader_stealc_stop_tofsee_vidar
- Size 13.3MB
- Sample260730-dclymsxhjh
- SHA256 4e5864eaf70e40df604ddc1982716c66bb223caae5a15b518fae20e7e8943157
- MD5 d2b823c004ea8df65619fcfb655e8ca5
- SHA1 b192a73dae780bd6c860f850ac21e6e840a42d11
- SHA512 df6f496ddbb7b3b78606f0f8ed112a409b9698df23493ea271824d0a9e1034a2ee9d25dadef8b2d9abe0ee55b31197ad8eba296bfda7cb8283c26ae27167a9eb
- SSDEEP 196608:anSunSunSunS+21Bu0FnSunSunSunS+21Bu0gxsx:a111zXu111zXG
- TLSH T17CE6B009FD8744F1D92761B00CDBE3BF8A707A25C5228DAAFB4DCB1B6933B615428356
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-30_d2b823c004ea8df65619fcfb655e8ca5_amadey_coinminer_elex_hawkeye_hijackloader_remcos_smoke-.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_d2b823c004ea8df65619fcfb655e8ca5_amadey_coinminer_elex_hawkeye_hijackloader_remcos_smoke-.exe
Resource
win11ltsc2024-20260710-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_d2b823c004ea8df65619fcfb655e8ca5_amadey_coinminer_elex_hawkeye_hijackloader_remcos_smoke-loader_stealc_stop_tofsee_vidar
- Size 13.3MB
- SHA256 4e5864eaf70e40df604ddc1982716c66bb223caae5a15b518fae20e7e8943157
- MD5 d2b823c004ea8df65619fcfb655e8ca5
- SHA1 b192a73dae780bd6c860f850ac21e6e840a42d11
- SHA512 df6f496ddbb7b3b78606f0f8ed112a409b9698df23493ea271824d0a9e1034a2ee9d25dadef8b2d9abe0ee55b31197ad8eba296bfda7cb8283c26ae27167a9eb
- SSDEEP 196608:anSunSunSunS+21Bu0FnSunSunSunS+21Bu0gxsx:a111zXu111zXG
- TLSH T17CE6B009FD8744F1D92761B00CDBE3BF8A707A25C5228DAAFB4DCB1B6933B615428356
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Creates new service(s)
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1Scheduled Task/Job
1Scheduled Task
1System Services
1Service Execution
1Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Scheduled Task/Job
1Scheduled Task
1