General
- Target 2026-08-12_283d72e076a92f043d3a92d54548124f_amadey_coinminer_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 764KB
- Sample260812-2lrggswdrd
- SHA256 afa080ec8174f298589becf5809385ebab30681cfa99587fb4694f9fd00d2618
- MD5 283d72e076a92f043d3a92d54548124f
- SHA1 e08b45053f2561e63bf22fae7a7e62f3258c2557
- SHA512 75d6c057fdf88c63989305b3e50067050652c8f02f06eae0b80ca6a5815e81b76605aa6c7016ce10a5ef2467673470a81fd7ec158bdf31eb16a17c4d28d16062
- SSDEEP 12288:6wKfOVRo9yRYeK4O8b8ITDnlV0kbgSE/LZo:6xWVeyRYH4O8b8ITDnlbMo
- TLSH T13FF4942161DCEABED46BAE38596569A2EA377CD19DE847CB2140BF0D7A313B0CC14317
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-12_283d72e076a92f043d3a92d54548124f_amadey_coinminer_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-12_283d72e076a92f043d3a92d54548124f_amadey_coinminer_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-12_283d72e076a92f043d3a92d54548124f_amadey_coinminer_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 764KB
- SHA256 afa080ec8174f298589becf5809385ebab30681cfa99587fb4694f9fd00d2618
- MD5 283d72e076a92f043d3a92d54548124f
- SHA1 e08b45053f2561e63bf22fae7a7e62f3258c2557
- SHA512 75d6c057fdf88c63989305b3e50067050652c8f02f06eae0b80ca6a5815e81b76605aa6c7016ce10a5ef2467673470a81fd7ec158bdf31eb16a17c4d28d16062
- SSDEEP 12288:6wKfOVRo9yRYeK4O8b8ITDnlV0kbgSE/LZo:6xWVeyRYH4O8b8ITDnlbMo
- TLSH T13FF4942161DCEABED46BAE38596569A2EA377CD19DE847CB2140BF0D7A313B0CC14317
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory