General
- Target 2026-08-16_a41b8d08e53ea003629a4494b551dcdf_amadey_coinminer_elex_remcos_smoke-loader
- Size 576KB
- Sample260816-ces93axenb
- SHA256 4b4d3cba12ecd19dd2ed7ee7a289a21b446c7b693f3452d229a8f3a22ab1ac09
- MD5 a41b8d08e53ea003629a4494b551dcdf
- SHA1 396b7337324f047da03551020a80a691fd26b869
- SHA512 215f627cf9075ea21cb4aeb85ad2426167f3872d79e656e563d1169393e69c09aa4b28a8ab26c0a952da37cc934159e3d4277dd6c26c9153f0ab3ee9cf5c07fe
- SSDEEP 12288:+qXUHkUXe39sOkx2LIan5FAQjU/Lik8CQ3K:+jHPOSOkx2LFscUQPK
- TLSH T1B3C47C31E201C03AD1A74572C6FE0BAFA568BD24431562C7A3D479762FF72D2AA3171E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-16_a41b8d08e53ea003629a4494b551dcdf_amadey_coinminer_elex_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_a41b8d08e53ea003629a4494b551dcdf_amadey_coinminer_elex_remcos_smoke-loader
- Size 576KB
- SHA256 4b4d3cba12ecd19dd2ed7ee7a289a21b446c7b693f3452d229a8f3a22ab1ac09
- MD5 a41b8d08e53ea003629a4494b551dcdf
- SHA1 396b7337324f047da03551020a80a691fd26b869
- SHA512 215f627cf9075ea21cb4aeb85ad2426167f3872d79e656e563d1169393e69c09aa4b28a8ab26c0a952da37cc934159e3d4277dd6c26c9153f0ab3ee9cf5c07fe
- SSDEEP 12288:+qXUHkUXe39sOkx2LIan5FAQjU/Lik8CQ3K:+jHPOSOkx2LFscUQPK
- TLSH T1B3C47C31E201C03AD1A74572C6FE0BAFA568BD24431562C7A3D479762FF72D2AA3171E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory