General
- Target 2026-08-06_8183e917bfa76bc6c46230f47630e205_amadey_coinminer_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 764KB
- Sample260806-2xgresvygz
- SHA256 3d2c3b10448d41b125982b6a4ed45d5a29dc9c196368d65323178241333230fb
- MD5 8183e917bfa76bc6c46230f47630e205
- SHA1 14c5b6589dc6000df7dc9c94b7623fa9186c1e97
- SHA512 1d39bc4e5b6456c9b463a3bdfce730a53e070b170579e799f46efdb4f80d89f4c0aa819c4e2cde8d9c621b800494752dcd4faffd1a7a8b61b26b60013dccac14
- SSDEEP 12288:6wKfOVRo9yRY+r4O8b8ITDnlV0kbgSE/LZo:6xWVeyRYe4O8b8ITDnlbMo
- TLSH T181F4942161DCEABED46BAE38596569A2EA377CD19DE847CB2140BF0D7A313B0CC14317
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-06_8183e917bfa76bc6c46230f47630e205_amadey_coinminer_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-06_8183e917bfa76bc6c46230f47630e205_amadey_coinminer_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-06_8183e917bfa76bc6c46230f47630e205_amadey_coinminer_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 764KB
- SHA256 3d2c3b10448d41b125982b6a4ed45d5a29dc9c196368d65323178241333230fb
- MD5 8183e917bfa76bc6c46230f47630e205
- SHA1 14c5b6589dc6000df7dc9c94b7623fa9186c1e97
- SHA512 1d39bc4e5b6456c9b463a3bdfce730a53e070b170579e799f46efdb4f80d89f4c0aa819c4e2cde8d9c621b800494752dcd4faffd1a7a8b61b26b60013dccac14
- SSDEEP 12288:6wKfOVRo9yRY+r4O8b8ITDnlV0kbgSE/LZo:6xWVeyRYe4O8b8ITDnlbMo
- TLSH T181F4942161DCEABED46BAE38596569A2EA377CD19DE847CB2140BF0D7A313B0CC14317
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory