General
- Target 2026-08-10_2978ad6b2babec47ccdb1d0c682419d1_amadey_coinminer_elex_remcos_smoke-loader_stop
- Size 830KB
- Sample260811-bx4cbasgnd
- SHA256 53b05836bfaf521e6404a50646a3a878b8e6dbe27f63bc771eba7ac91f9c2fe6
- MD5 2978ad6b2babec47ccdb1d0c682419d1
- SHA1 15e4767afa94590b4e30fc7d2eb6d456f6a267f5
- SHA512 0d39bf3d16b35cd04dac1406348a80b425a198a68118db700db0fc7fc2ae4707cba83cdf56b78749e5d4ca8d24108a13dba6a3778d6ee8cfcf4d0ae90b616277
- SSDEEP 12288:rSvO2x9mONvKRwLSFtsOkx2LIa+ya5FAQjU/Lik8CQ3K:evO2xJKRw2kOkx2LFRvcUQPK
- TLSH T1DC055A31E641C03AD0A74575C6FA4BBFE964BD25131165CBA3C43A262FB36D2BA3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-10_2978ad6b2babec47ccdb1d0c682419d1_amadey_coinminer_elex_remcos_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_2978ad6b2babec47ccdb1d0c682419d1_amadey_coinminer_elex_remcos_smoke-loader_stop
- Size 830KB
- SHA256 53b05836bfaf521e6404a50646a3a878b8e6dbe27f63bc771eba7ac91f9c2fe6
- MD5 2978ad6b2babec47ccdb1d0c682419d1
- SHA1 15e4767afa94590b4e30fc7d2eb6d456f6a267f5
- SHA512 0d39bf3d16b35cd04dac1406348a80b425a198a68118db700db0fc7fc2ae4707cba83cdf56b78749e5d4ca8d24108a13dba6a3778d6ee8cfcf4d0ae90b616277
- SSDEEP 12288:rSvO2x9mONvKRwLSFtsOkx2LIa+ya5FAQjU/Lik8CQ3K:evO2xJKRw2kOkx2LFRvcUQPK
- TLSH T1DC055A31E641C03AD0A74575C6FA4BBFE964BD25131165CBA3C43A262FB36D2BA3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory