General
- Target 2026-08-08_6f439830845e3d4256d23a632cfec9fc_amadey_coinminer_elex_remcos_smoke-loader
- Size 576KB
- Sample260808-zlwebsdl81
- SHA256 8425a9544009d912490cd4208c686e47c1abff0ada7ae7eb8fc795118277ac55
- MD5 6f439830845e3d4256d23a632cfec9fc
- SHA1 fd703e43680d18ccedc14bcb34ff8f0240577aa9
- SHA512 0b43395508c144c72970d1ff3842fa3d9ec09c0cb08e089384891fda808e4dde1f5d920c20af5534d3304620a03cc0a32b4b75c1c46bb02b1fbac3efb43cd143
- SSDEEP 12288:WqXUHkUXe39sOkx2LIan5FAQjU/Lik8CQ3K:WjHPOSOkx2LFscUQPK
- TLSH T12AC47C31E201C03AD1A74572C6FE0BAFA568BD24431562C7A3D479762FF72D2AA3171E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-08_6f439830845e3d4256d23a632cfec9fc_amadey_coinminer_elex_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_6f439830845e3d4256d23a632cfec9fc_amadey_coinminer_elex_remcos_smoke-loader
- Size 576KB
- SHA256 8425a9544009d912490cd4208c686e47c1abff0ada7ae7eb8fc795118277ac55
- MD5 6f439830845e3d4256d23a632cfec9fc
- SHA1 fd703e43680d18ccedc14bcb34ff8f0240577aa9
- SHA512 0b43395508c144c72970d1ff3842fa3d9ec09c0cb08e089384891fda808e4dde1f5d920c20af5534d3304620a03cc0a32b4b75c1c46bb02b1fbac3efb43cd143
- SSDEEP 12288:WqXUHkUXe39sOkx2LIan5FAQjU/Lik8CQ3K:WjHPOSOkx2LFscUQPK
- TLSH T12AC47C31E201C03AD1A74572C6FE0BAFA568BD24431562C7A3D479762FF72D2AA3171E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory