General
- Target 2026-08-09_8c34245b8b697fe6726985ad35bc66b9_amadey_coinminer_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 765KB
- Sample260809-znhw1svhrf
- SHA256 d4389dbe3ec6268404b9e3439b89887c188adf9627df19564a82a2ffb8c43a4e
- MD5 8c34245b8b697fe6726985ad35bc66b9
- SHA1 3e5b8f905b7b90f3d8a46ff64457d08c05062c93
- SHA512 d4855f355577a1da67e355b79cfcc170eda2650cc4bbc0e302a2711114e58bf5330dd26dc42c702ff3b34868e4029196eba0a60ad166d0d33899ff564c9116c4
- SSDEEP 12288:ywKfOVRo9yRYS4O8b8ITDnlV0kbgSE/LgU:yxWVeyRYS4O8b8ITDnlbRU
- TLSH T126F4942161DCEABED46BAE38596569A2EA377CD19DE847CB2140BF0D7A313B0CC14317
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_8c34245b8b697fe6726985ad35bc66b9_amadey_coinminer_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_8c34245b8b697fe6726985ad35bc66b9_amadey_coinminer_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_8c34245b8b697fe6726985ad35bc66b9_amadey_coinminer_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 765KB
- SHA256 d4389dbe3ec6268404b9e3439b89887c188adf9627df19564a82a2ffb8c43a4e
- MD5 8c34245b8b697fe6726985ad35bc66b9
- SHA1 3e5b8f905b7b90f3d8a46ff64457d08c05062c93
- SHA512 d4855f355577a1da67e355b79cfcc170eda2650cc4bbc0e302a2711114e58bf5330dd26dc42c702ff3b34868e4029196eba0a60ad166d0d33899ff564c9116c4
- SSDEEP 12288:ywKfOVRo9yRYS4O8b8ITDnlV0kbgSE/LgU:yxWVeyRYS4O8b8ITDnlbRU
- TLSH T126F4942161DCEABED46BAE38596569A2EA377CD19DE847CB2140BF0D7A313B0CC14317
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory