General
- Target 2026-08-14_43d938a9e21f26b365dcd1d8a4f52d30_amadey_coinminer_elex_remcos_smoke-loader
- Size 618KB
- Sample260814-mj6fashq2w
- SHA256 83d5d77865af8ae44ba66fb2ccc562eeeb637e0f868e5f4eb3f7e7be71e37b8f
- MD5 43d938a9e21f26b365dcd1d8a4f52d30
- SHA1 9840cd7a6233e2c002585e788d11333e639edd3e
- SHA512 89b6ed8cb1720832ceecdb9167c8679a29f310b35249a30d3fd971daa5d316a65da187685aa9b3d4ee7b1ea200b88966e111576141aa4817dcd176dd4c3c87e2
- SSDEEP 12288:eqXUHkUXe39sOkx2LIan5FAQjU/Lik8CQ3uEW:ejHPOSOkx2LFscUQPxW
- TLSH T145D47C31E201C03AD0A74576C6FE0BAFA5687D25431662C7A3D479362FF72D2AA3171E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-14_43d938a9e21f26b365dcd1d8a4f52d30_amadey_coinminer_elex_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-14_43d938a9e21f26b365dcd1d8a4f52d30_amadey_coinminer_elex_remcos_smoke-loader
- Size 618KB
- SHA256 83d5d77865af8ae44ba66fb2ccc562eeeb637e0f868e5f4eb3f7e7be71e37b8f
- MD5 43d938a9e21f26b365dcd1d8a4f52d30
- SHA1 9840cd7a6233e2c002585e788d11333e639edd3e
- SHA512 89b6ed8cb1720832ceecdb9167c8679a29f310b35249a30d3fd971daa5d316a65da187685aa9b3d4ee7b1ea200b88966e111576141aa4817dcd176dd4c3c87e2
- SSDEEP 12288:eqXUHkUXe39sOkx2LIan5FAQjU/Lik8CQ3uEW:ejHPOSOkx2LFscUQPxW
- TLSH T145D47C31E201C03AD0A74576C6FE0BAFA5687D25431662C7A3D479362FF72D2AA3171E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory