General
- Target 2026-08-08_bf4a3ff418455cdfc57efb9b07ace4a3_amadey_coinminer_elex_remcos_smoke-loader_stop
- Size 873KB
- Sample260809-ad953sz1fz
- SHA256 14076926d620dea0cabda861b873194de3df5f8fdf079144cad58379af866d2f
- MD5 bf4a3ff418455cdfc57efb9b07ace4a3
- SHA1 af061c2c314e37c122d9a14ed41db16c31648438
- SHA512 b038c15288bc9e5ef7d93a64dceab9bf6813867bef6284da6a5bf52ed3033701d9cfbbe32f341baf25990273472060174de7f497d13cfd2ca6168f921fa32e9d
- SSDEEP 12288:sSvO2x9mONvKRhLSFtsOkx2LIaeyk5FAQjU/Lik8CQ3uEW:fvO2xJKRh2kOkx2LFxNcUQPxW
- TLSH T1FE156B31E641C036D0A34576C6FA4BBFE964BD25531165CBA3D43A262FB32D2BA3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-08_bf4a3ff418455cdfc57efb9b07ace4a3_amadey_coinminer_elex_remcos_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_bf4a3ff418455cdfc57efb9b07ace4a3_amadey_coinminer_elex_remcos_smoke-loader_stop
- Size 873KB
- SHA256 14076926d620dea0cabda861b873194de3df5f8fdf079144cad58379af866d2f
- MD5 bf4a3ff418455cdfc57efb9b07ace4a3
- SHA1 af061c2c314e37c122d9a14ed41db16c31648438
- SHA512 b038c15288bc9e5ef7d93a64dceab9bf6813867bef6284da6a5bf52ed3033701d9cfbbe32f341baf25990273472060174de7f497d13cfd2ca6168f921fa32e9d
- SSDEEP 12288:sSvO2x9mONvKRhLSFtsOkx2LIaeyk5FAQjU/Lik8CQ3uEW:fvO2xJKRh2kOkx2LFxNcUQPxW
- TLSH T1FE156B31E641C036D0A34576C6FA4BBFE964BD25531165CBA3D43A262FB32D2BA3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory