General
- Target 2026-08-14_d3a3ec3fe0385b87138bf43f3523b538_amadey_coinminer_elex_remcos_smoke-loader_stop
- Size 830KB
- Sample260814-btgdda11es
- SHA256 872ca9d7d2a370d7376e1088b4447a56b66ba352b56aa56d9bf44fb0c2c34f77
- MD5 d3a3ec3fe0385b87138bf43f3523b538
- SHA1 b6cbbe08061295d5f2ec2ca14e7417d9642659b7
- SHA512 bcbb43cd2595c0d67454704748c3846292fb3bbe9e0619e8e03909f1e79d85c73086c13af23e99ecc341c0d69261aeef3d6ec6a19a4db792cddceb14a84c9f1b
- SSDEEP 12288:8SvO2x9mONvKRwLSFtsOkx2LIa+ya5FAQjU/Lik8CQ3K:PvO2xJKRw2kOkx2LFRvcUQPK
- TLSH T172055A31E641C03AD0A74575C6FA4BBFE964BD25131165CBA3C43A262FB36D2BA3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-14_d3a3ec3fe0385b87138bf43f3523b538_amadey_coinminer_elex_remcos_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-14_d3a3ec3fe0385b87138bf43f3523b538_amadey_coinminer_elex_remcos_smoke-loader_stop
- Size 830KB
- SHA256 872ca9d7d2a370d7376e1088b4447a56b66ba352b56aa56d9bf44fb0c2c34f77
- MD5 d3a3ec3fe0385b87138bf43f3523b538
- SHA1 b6cbbe08061295d5f2ec2ca14e7417d9642659b7
- SHA512 bcbb43cd2595c0d67454704748c3846292fb3bbe9e0619e8e03909f1e79d85c73086c13af23e99ecc341c0d69261aeef3d6ec6a19a4db792cddceb14a84c9f1b
- SSDEEP 12288:8SvO2x9mONvKRwLSFtsOkx2LIa+ya5FAQjU/Lik8CQ3K:PvO2xJKRw2kOkx2LFRvcUQPK
- TLSH T172055A31E641C03AD0A74575C6FA4BBFE964BD25131165CBA3C43A262FB36D2BA3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory