General
- Target 2026-08-03_fab924afd54f2b2f747eb4bf71ef430d_amadey_coinminer_elex_emotet_remcos_smoke-loader_stop
- Size 10.4MB
- Sample260804-krbvjsbm9x
- SHA256 86ac31077fc9a3c49aede0f1b24d41a1254f3950ec02bd20fbd21825e5b90054
- MD5 fab924afd54f2b2f747eb4bf71ef430d
- SHA1 4e7d1602c31affea63ff3dc500d1ecdbfd59f4ac
- SHA512 d9da8dabf96f006e91a2aa7269f49a5e35ffc0e71665f31c30ede1ea2ec02df252284f80560227bdc5a4fab99964f979def5e0ed5b48c20d2e18dd13db33509d
- SSDEEP 196608:XZGmuMsR2/LGPLCXOKODxH5qFlXS47dV2MANpvrjVbEKGWIoSB:XZGnMsREJLODBWlX3d+NpvdHIom
- TLSH T1D2B61233A1908066D289193956736F3879F8975D5EB0CCB3F7E4ECE22D624E1E72710A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_fab924afd54f2b2f747eb4bf71ef430d_amadey_coinminer_elex_emotet_remcos_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_fab924afd54f2b2f747eb4bf71ef430d_amadey_coinminer_elex_emotet_remcos_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_fab924afd54f2b2f747eb4bf71ef430d_amadey_coinminer_elex_emotet_remcos_smoke-loader_stop
- Size 10.4MB
- SHA256 86ac31077fc9a3c49aede0f1b24d41a1254f3950ec02bd20fbd21825e5b90054
- MD5 fab924afd54f2b2f747eb4bf71ef430d
- SHA1 4e7d1602c31affea63ff3dc500d1ecdbfd59f4ac
- SHA512 d9da8dabf96f006e91a2aa7269f49a5e35ffc0e71665f31c30ede1ea2ec02df252284f80560227bdc5a4fab99964f979def5e0ed5b48c20d2e18dd13db33509d
- SSDEEP 196608:XZGmuMsR2/LGPLCXOKODxH5qFlXS47dV2MANpvrjVbEKGWIoSB:XZGnMsREJLODBWlX3d+NpvdHIom
- TLSH T1D2B61233A1908066D289193956736F3879F8975D5EB0CCB3F7E4ECE22D624E1E72710A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Suspicious use of NtSetInformationThreadHideFromDebugger