General
- Target 2026-08-02_78c2495e32523692560ed56ba97480e3_amadey_coinminer_elex_emotet_remcos_smoke-loader_stop
- Size 10.4MB
- Sample260803-ag5prszscs
- SHA256 f21a4fd385664bf6968898c38026f464127379b7ba8fd7b5ac0beb8bdd160440
- MD5 78c2495e32523692560ed56ba97480e3
- SHA1 9a9f653169040b44cc8e3d5a6459f40b874be935
- SHA512 3a927919f1b25343b2c7b864fb64c1e6b9fdc96dc3451924bcc4f3e45bc7ab1c11926191d28ade617f80c0c2cbd41a0d9d7c0026fd8f2a43066de41ce0ab3f8e
- SSDEEP 196608:XZGmursR2/LGPLCXOKODxH5qFlXS47dV2MANpvrjVbEKGWIoSg:XZGnrsREJLODBWlX3d+NpvdHIoP
- TLSH T15CB61233A1908066D289193956736F3879F8975D5EB0CCB3F7E4ECE22D624E1E72710A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-02_78c2495e32523692560ed56ba97480e3_amadey_coinminer_elex_emotet_remcos_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_78c2495e32523692560ed56ba97480e3_amadey_coinminer_elex_emotet_remcos_smoke-loader_stop.exe
Resource
win11ltsc2024-20260710-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_78c2495e32523692560ed56ba97480e3_amadey_coinminer_elex_emotet_remcos_smoke-loader_stop
- Size 10.4MB
- SHA256 f21a4fd385664bf6968898c38026f464127379b7ba8fd7b5ac0beb8bdd160440
- MD5 78c2495e32523692560ed56ba97480e3
- SHA1 9a9f653169040b44cc8e3d5a6459f40b874be935
- SHA512 3a927919f1b25343b2c7b864fb64c1e6b9fdc96dc3451924bcc4f3e45bc7ab1c11926191d28ade617f80c0c2cbd41a0d9d7c0026fd8f2a43066de41ce0ab3f8e
- SSDEEP 196608:XZGmursR2/LGPLCXOKODxH5qFlXS47dV2MANpvrjVbEKGWIoSg:XZGnrsREJLODBWlX3d+NpvdHIoP
- TLSH T15CB61233A1908066D289193956736F3879F8975D5EB0CCB3F7E4ECE22D624E1E72710A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Suspicious use of NtSetInformationThreadHideFromDebugger