General
- Target 2026-08-16_f89e4b2ce6c84f67384dc66411d176ce_amadey_coinminer_elex_remcos_smoke-loader
- Size 618KB
- Sample260816-plnpdaxend
- SHA256 4ffa116eac132e37a3e19bcc040440d396e5bd3372e8a490ed2a3ce811966d76
- MD5 f89e4b2ce6c84f67384dc66411d176ce
- SHA1 8445bf3d2c25460a1f17d9c95a2f28b1468080e9
- SHA512 9d9f1cdd8fd87cad275ef217172529c074a4b96719c0b46f15e26fdf5c26cfd55d9899bf1d6ce2662d3d2a99c10a208f11352b00c8a65c3427abc07e58c2c317
- SSDEEP 12288:oqXUHkUXe39sOkx2LIan5FAQjU/Lik8CQ3uEW:ojHPOSOkx2LFscUQPxW
- TLSH T1E7D47C31E201C03AD0A74576C6FE0BAFA5687D25431662C7A3D479362FF72D2AA3171E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-16_f89e4b2ce6c84f67384dc66411d176ce_amadey_coinminer_elex_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_f89e4b2ce6c84f67384dc66411d176ce_amadey_coinminer_elex_remcos_smoke-loader
- Size 618KB
- SHA256 4ffa116eac132e37a3e19bcc040440d396e5bd3372e8a490ed2a3ce811966d76
- MD5 f89e4b2ce6c84f67384dc66411d176ce
- SHA1 8445bf3d2c25460a1f17d9c95a2f28b1468080e9
- SHA512 9d9f1cdd8fd87cad275ef217172529c074a4b96719c0b46f15e26fdf5c26cfd55d9899bf1d6ce2662d3d2a99c10a208f11352b00c8a65c3427abc07e58c2c317
- SSDEEP 12288:oqXUHkUXe39sOkx2LIan5FAQjU/Lik8CQ3uEW:ojHPOSOkx2LFscUQPxW
- TLSH T1E7D47C31E201C03AD0A74576C6FE0BAFA5687D25431662C7A3D479362FF72D2AA3171E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory