General
- Target 2026-07-30_4de3018d30be3652fa7320a5fe9d9821_amadey_coinminer_elex_remcos_smoke-loader
- Size 618KB
- Sample260730-gdfd2adm4y
- SHA256 d597c72cda2ca9df72cd78d9819b241abd7aab51d24a4268b1d981564bca00be
- MD5 4de3018d30be3652fa7320a5fe9d9821
- SHA1 e8462feed50517dd765bc17f257225d448112b1b
- SHA512 ebe2c194c9d360b5383b20aca5777bffea713842c2723b26577cbe09658b86f0bf12012fba9d540aaa6a440503e3bfbddc9f5395cef325a3b7da623ee3ea836a
- SSDEEP 12288:OqXUHkUXe39sOkx2LIan5FAQjU/Lik8CQ3uEW:OjHPOSOkx2LFscUQPxW
- TLSH T107D47C31E201C03AD0A74576C6FE0BAFA5687D25431662C7A3D479362FF72D2AA3171E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-30_4de3018d30be3652fa7320a5fe9d9821_amadey_coinminer_elex_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_4de3018d30be3652fa7320a5fe9d9821_amadey_coinminer_elex_remcos_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_4de3018d30be3652fa7320a5fe9d9821_amadey_coinminer_elex_remcos_smoke-loader
- Size 618KB
- SHA256 d597c72cda2ca9df72cd78d9819b241abd7aab51d24a4268b1d981564bca00be
- MD5 4de3018d30be3652fa7320a5fe9d9821
- SHA1 e8462feed50517dd765bc17f257225d448112b1b
- SHA512 ebe2c194c9d360b5383b20aca5777bffea713842c2723b26577cbe09658b86f0bf12012fba9d540aaa6a440503e3bfbddc9f5395cef325a3b7da623ee3ea836a
- SSDEEP 12288:OqXUHkUXe39sOkx2LIan5FAQjU/Lik8CQ3uEW:OjHPOSOkx2LFscUQPxW
- TLSH T107D47C31E201C03AD0A74576C6FE0BAFA5687D25431662C7A3D479362FF72D2AA3171E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory