General
- Target 2026-08-10_13d9a7e75785ac0f5e7d9818674431a9_amadey_coinminer_elex_remcos_smoke-loader
- Size 618KB
- Sample260810-kqf3wafa83
- SHA256 02f15e4797523e8699c9a9a22512b38217e0b4733fee1c5936f4d2d7bd9725d2
- MD5 13d9a7e75785ac0f5e7d9818674431a9
- SHA1 c2808a7cc4c2b5b63395219851d99cde75185f4a
- SHA512 507e2071170596b60beec173fb5348ea86273d82decc8c10d399f9d71910fa60e4fd53b3dce4c4b926e5ce3d5894d4ff0c6f2f96e355e482cc8ccf4673a09e6e
- SSDEEP 12288:sqXUHkUXe39sOkx2LIan5FAQjU/Lik8CQ3uEW:sjHPOSOkx2LFscUQPxW
- TLSH T1EFD47C31E201C03AD0A74576C6FE0BAFA5687D25431662C7A3D479362FF72D2AA3171E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-10_13d9a7e75785ac0f5e7d9818674431a9_amadey_coinminer_elex_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_13d9a7e75785ac0f5e7d9818674431a9_amadey_coinminer_elex_remcos_smoke-loader
- Size 618KB
- SHA256 02f15e4797523e8699c9a9a22512b38217e0b4733fee1c5936f4d2d7bd9725d2
- MD5 13d9a7e75785ac0f5e7d9818674431a9
- SHA1 c2808a7cc4c2b5b63395219851d99cde75185f4a
- SHA512 507e2071170596b60beec173fb5348ea86273d82decc8c10d399f9d71910fa60e4fd53b3dce4c4b926e5ce3d5894d4ff0c6f2f96e355e482cc8ccf4673a09e6e
- SSDEEP 12288:sqXUHkUXe39sOkx2LIan5FAQjU/Lik8CQ3uEW:sjHPOSOkx2LFscUQPxW
- TLSH T1EFD47C31E201C03AD0A74576C6FE0BAFA5687D25431662C7A3D479362FF72D2AA3171E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory