General
- Target 2026-08-09_56466707b9c9105ef4787905d4cff3cf_amadey_coinminer_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 767KB
- Sample260809-1pd5wsej6y
- SHA256 3f5a838bef65d902fc849a50ee284222c9401f1fbc054050bf8a3ef9a039a6ca
- MD5 56466707b9c9105ef4787905d4cff3cf
- SHA1 39aad51bd98259c91101728e9de09870d38f48d0
- SHA512 c907c1a66c20994b7c9b2a152a7760ab26a4e234db80efb68faf9e6d58a5cf32aed2cfe692715f93ea29e2511cacf661ea369b9db451206554a85c2c521732d7
- SSDEEP 12288:ywKfOVRo9yRY5X4O8b8ITDnlV0kbgSE/LFA:yxWVeyRY5X4O8b8ITDnlb4A
- TLSH T19BF4952161DCEABED46BAE38596569A2E9377CD19EE847CB2140BF0D7A313B0CC14317
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_56466707b9c9105ef4787905d4cff3cf_amadey_coinminer_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_56466707b9c9105ef4787905d4cff3cf_amadey_coinminer_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_56466707b9c9105ef4787905d4cff3cf_amadey_coinminer_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 767KB
- SHA256 3f5a838bef65d902fc849a50ee284222c9401f1fbc054050bf8a3ef9a039a6ca
- MD5 56466707b9c9105ef4787905d4cff3cf
- SHA1 39aad51bd98259c91101728e9de09870d38f48d0
- SHA512 c907c1a66c20994b7c9b2a152a7760ab26a4e234db80efb68faf9e6d58a5cf32aed2cfe692715f93ea29e2511cacf661ea369b9db451206554a85c2c521732d7
- SSDEEP 12288:ywKfOVRo9yRY5X4O8b8ITDnlV0kbgSE/LFA:yxWVeyRY5X4O8b8ITDnlb4A
- TLSH T19BF4952161DCEABED46BAE38596569A2E9377CD19EE847CB2140BF0D7A313B0CC14317
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory