General
- Target 2026-08-11_04d14db55f62dcf952b81b202dc8c761_amadey_coinminer_elex_remcos_smoke-loader_stop
- Size 830KB
- Sample260811-vvmrbst1hv
- SHA256 343eedfd68dde74e732085191ebc7218b5fe94bddfd4a24715311bac37e0c701
- MD5 04d14db55f62dcf952b81b202dc8c761
- SHA1 50be7506aecbf7f35d8c95b70fb3d0716432f8ad
- SHA512 8e106594cbe79001fb084bb63210a2eab528eb1b2a739dfa014bf721aeead7679f80e972667b516d4ffed29a38a7aa72a23fbbd270a8c0c1e86910bcac448636
- SSDEEP 12288:uSvO2x9mONvKRwLSFtsOkx2LIa+ya5FAQjU/Lik8CQ3K:NvO2xJKRw2kOkx2LFRvcUQPK
- TLSH T169055A31E641C03AD0A74575C6FA4BBFE964BD25131165CBA3C43A262FB36D2BA3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-11_04d14db55f62dcf952b81b202dc8c761_amadey_coinminer_elex_remcos_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-11_04d14db55f62dcf952b81b202dc8c761_amadey_coinminer_elex_remcos_smoke-loader_stop
- Size 830KB
- SHA256 343eedfd68dde74e732085191ebc7218b5fe94bddfd4a24715311bac37e0c701
- MD5 04d14db55f62dcf952b81b202dc8c761
- SHA1 50be7506aecbf7f35d8c95b70fb3d0716432f8ad
- SHA512 8e106594cbe79001fb084bb63210a2eab528eb1b2a739dfa014bf721aeead7679f80e972667b516d4ffed29a38a7aa72a23fbbd270a8c0c1e86910bcac448636
- SSDEEP 12288:uSvO2x9mONvKRwLSFtsOkx2LIa+ya5FAQjU/Lik8CQ3K:NvO2xJKRw2kOkx2LFRvcUQPK
- TLSH T169055A31E641C03AD0A74575C6FA4BBFE964BD25131165CBA3C43A262FB36D2BA3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory