General
- Target 2026-08-03_cb655b9e85ba4fcb79d872551412e0fa_amadey_coinminer_elex_remcos_smoke-loader
- Size 618KB
- Sample260803-m5ejpsvfqa
- SHA256 c2167654a303f86f62523d2688b148041c69c0a033438ebebb0c688bc8b3b37c
- MD5 cb655b9e85ba4fcb79d872551412e0fa
- SHA1 0843beb2e25e2ce03e71197212649de8196fde51
- SHA512 93c972a4d783c6f546937dc3f71750b3f1869dc57916ac247e7504dce487f9ce5ca45f424b90dc5b344f4e89553a2e3480e171cc727026c6951b138a1304f2fd
- SSDEEP 12288:1qXUHkUXe39sOkx2LIan5FAQjU/Lik8CQ3uEW:1jHPOSOkx2LFscUQPxW
- TLSH T1ACD47C31E201C03AD0A74576C6FE0BAFA5687D25431662C7A3D479362FF72D2AA3171E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-03_cb655b9e85ba4fcb79d872551412e0fa_amadey_coinminer_elex_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_cb655b9e85ba4fcb79d872551412e0fa_amadey_coinminer_elex_remcos_smoke-loader
- Size 618KB
- SHA256 c2167654a303f86f62523d2688b148041c69c0a033438ebebb0c688bc8b3b37c
- MD5 cb655b9e85ba4fcb79d872551412e0fa
- SHA1 0843beb2e25e2ce03e71197212649de8196fde51
- SHA512 93c972a4d783c6f546937dc3f71750b3f1869dc57916ac247e7504dce487f9ce5ca45f424b90dc5b344f4e89553a2e3480e171cc727026c6951b138a1304f2fd
- SSDEEP 12288:1qXUHkUXe39sOkx2LIan5FAQjU/Lik8CQ3uEW:1jHPOSOkx2LFscUQPxW
- TLSH T1ACD47C31E201C03AD0A74576C6FE0BAFA5687D25431662C7A3D479362FF72D2AA3171E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory