General
- Target 2026-08-03_a1b02335b343a8c8fa153e7b81af0577_amadey_coinminer_elex_hawkeye_hijackloader_remcos_smoke-loader_stealc_stop_tofsee
- Size 75.3MB
- Sample260804-mja96acp7y
- SHA256 44791a6b6c18c57e0682c2fb17b334bf407b7f598999be4fa9572e9fa9b68e2f
- MD5 a1b02335b343a8c8fa153e7b81af0577
- SHA1 0bef087d9e953a1bf47868c5db6adccb9aff3211
- SHA512 7c82db056b55d431cb647223f2919026ab65dc15ca9da0318066bdb7cc934de2d6e71c066e1d3b7eb7113c18ed6ff74348ff44bfb3778ffaa32754f1e84e3a72
- SSDEEP 1572864:a111C111A111C111A111C111A111C111A111C111A111C1112:I
- TLSH T1EE08AF09FD8744F1D92B61B04DDBE3BF8A707A25C4228E7AFB4ECB1B6533B215418256
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-03_a1b02335b343a8c8fa153e7b81af0577_amadey_coinminer_elex_hawkeye_hijackloader_remcos_smoke-.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_a1b02335b343a8c8fa153e7b81af0577_amadey_coinminer_elex_hawkeye_hijackloader_remcos_smoke-.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_a1b02335b343a8c8fa153e7b81af0577_amadey_coinminer_elex_hawkeye_hijackloader_remcos_smoke-loader_stealc_stop_tofsee
- Size 75.3MB
- SHA256 44791a6b6c18c57e0682c2fb17b334bf407b7f598999be4fa9572e9fa9b68e2f
- MD5 a1b02335b343a8c8fa153e7b81af0577
- SHA1 0bef087d9e953a1bf47868c5db6adccb9aff3211
- SHA512 7c82db056b55d431cb647223f2919026ab65dc15ca9da0318066bdb7cc934de2d6e71c066e1d3b7eb7113c18ed6ff74348ff44bfb3778ffaa32754f1e84e3a72
- SSDEEP 1572864:a111C111A111C111A111C111A111C111A111C111A111C1112:I
- TLSH T1EE08AF09FD8744F1D92B61B04DDBE3BF8A707A25C4228E7AFB4ECB1B6533B215418256
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Creates new service(s)
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1Scheduled Task/Job
1Scheduled Task
1System Services
1Service Execution
1Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Scheduled Task/Job
1Scheduled Task
1