General
- Target 2026-08-03_4b78367ba2cd1685e03a9143f851edbb_amadey_coinminer_elex_emotet_remcos_smoke-loader_stop
- Size 10.4MB
- Sample260803-wwx45avflf
- SHA256 009ca97fb0a82563f9efda8ab3ee70a7c26cb5cdc14d3e6b68b4b5b48c6835bc
- MD5 4b78367ba2cd1685e03a9143f851edbb
- SHA1 13c01ff7476aae68a3c37b2305b86d906775ed49
- SHA512 52c6b4cbd7778288dd05f00f1ff7500825037912d7b05585e9c0c8f35092cf58bfb4d5ff50a9b46aef99234ec57892c239ffa25f0602b8d4a25921de623f3ec8
- SSDEEP 196608:XZGmu2sR2/LGPLCXOKODxH5qFlXS47dV2MANpvrjVbEKGWIoS3:XZGn2sREJLODBWlX3d+NpvdHIoU
- TLSH T134B61233A1908066D289193956736F3879F8975D5EB0CCB3F7E4ECE22D624E1E72710A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_4b78367ba2cd1685e03a9143f851edbb_amadey_coinminer_elex_emotet_remcos_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_4b78367ba2cd1685e03a9143f851edbb_amadey_coinminer_elex_emotet_remcos_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_4b78367ba2cd1685e03a9143f851edbb_amadey_coinminer_elex_emotet_remcos_smoke-loader_stop
- Size 10.4MB
- SHA256 009ca97fb0a82563f9efda8ab3ee70a7c26cb5cdc14d3e6b68b4b5b48c6835bc
- MD5 4b78367ba2cd1685e03a9143f851edbb
- SHA1 13c01ff7476aae68a3c37b2305b86d906775ed49
- SHA512 52c6b4cbd7778288dd05f00f1ff7500825037912d7b05585e9c0c8f35092cf58bfb4d5ff50a9b46aef99234ec57892c239ffa25f0602b8d4a25921de623f3ec8
- SSDEEP 196608:XZGmu2sR2/LGPLCXOKODxH5qFlXS47dV2MANpvrjVbEKGWIoS3:XZGn2sREJLODBWlX3d+NpvdHIoU
- TLSH T134B61233A1908066D289193956736F3879F8975D5EB0CCB3F7E4ECE22D624E1E72710A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Suspicious use of NtSetInformationThreadHideFromDebugger