General
- Target 2026-08-07_342e20dba1780be9e933c69e5dd6b421_amadey_coinminer_elex_emotet_remcos_smoke-loader_stop
- Size 10.4MB
- Sample260807-ehc4csxbkd
- SHA256 a9e4d0b08b238b693521934df59c0162013b69c0e31f636d6d2e1842c6cb5445
- MD5 342e20dba1780be9e933c69e5dd6b421
- SHA1 bf7f373138626ae0b429097190c8bd01015e102d
- SHA512 2444e556e49d88a163412471470c7255a204d98f375b963c4ccf18ba5e2f0e3e0ae8958e51234806a4ba1a86ff171075f6868761c05018b27351fa32d4c37e49
- SSDEEP 196608:XZGmuQsR2/LGPLCXOKODxH5qFlXS47dV2MANpvrjVbEKGWIoS1:XZGnQsREJLODBWlX3d+NpvdHIoQ
- TLSH T1F8B61233A1908066D289193956736F3879F8975D5EB0CCB3F7E4ECE22D624E1E72710A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-07_342e20dba1780be9e933c69e5dd6b421_amadey_coinminer_elex_emotet_remcos_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-07_342e20dba1780be9e933c69e5dd6b421_amadey_coinminer_elex_emotet_remcos_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_342e20dba1780be9e933c69e5dd6b421_amadey_coinminer_elex_emotet_remcos_smoke-loader_stop
- Size 10.4MB
- SHA256 a9e4d0b08b238b693521934df59c0162013b69c0e31f636d6d2e1842c6cb5445
- MD5 342e20dba1780be9e933c69e5dd6b421
- SHA1 bf7f373138626ae0b429097190c8bd01015e102d
- SHA512 2444e556e49d88a163412471470c7255a204d98f375b963c4ccf18ba5e2f0e3e0ae8958e51234806a4ba1a86ff171075f6868761c05018b27351fa32d4c37e49
- SSDEEP 196608:XZGmuQsR2/LGPLCXOKODxH5qFlXS47dV2MANpvrjVbEKGWIoS1:XZGnQsREJLODBWlX3d+NpvdHIoQ
- TLSH T1F8B61233A1908066D289193956736F3879F8975D5EB0CCB3F7E4ECE22D624E1E72710A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Suspicious use of NtSetInformationThreadHideFromDebugger