General
- Target 2026-08-16_6e2cd1acfed3d0d8bdd2a27f00b54dc5_amadey_coinminer_elex_emotet_remcos_smoke-loader_stop
- Size 10.4MB
- Sample260816-wcg9katwhy
- SHA256 53c39e4a9936c221bffa4cc96297b744b7942c157da67c2f0b2cd8b8dbf26ef5
- MD5 6e2cd1acfed3d0d8bdd2a27f00b54dc5
- SHA1 cf80422eaf5bd882c0a4b35e74e6b0abcb2bfc82
- SHA512 aa03a227422c80758a9928f87953d4fa9fe82c2664260e1e1fa00c3bb59ea71e40d479c926465c8e30a5e7b147f031d14fc01582a7b466d3345cd7b6653f97fa
- SSDEEP 196608:XZGmuEsR2/LGPLCXOKODxH5qFlXS47dV2MANpvrjVbEKGWIoS3:XZGnEsREJLODBWlX3d+NpvdHIoU
- TLSH T121B61233A1908066D289193956736F3879F8975D5EB0CCB3F7E4ECE22D624E1E72710A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-16_6e2cd1acfed3d0d8bdd2a27f00b54dc5_amadey_coinminer_elex_emotet_remcos_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-16_6e2cd1acfed3d0d8bdd2a27f00b54dc5_amadey_coinminer_elex_emotet_remcos_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_6e2cd1acfed3d0d8bdd2a27f00b54dc5_amadey_coinminer_elex_emotet_remcos_smoke-loader_stop
- Size 10.4MB
- SHA256 53c39e4a9936c221bffa4cc96297b744b7942c157da67c2f0b2cd8b8dbf26ef5
- MD5 6e2cd1acfed3d0d8bdd2a27f00b54dc5
- SHA1 cf80422eaf5bd882c0a4b35e74e6b0abcb2bfc82
- SHA512 aa03a227422c80758a9928f87953d4fa9fe82c2664260e1e1fa00c3bb59ea71e40d479c926465c8e30a5e7b147f031d14fc01582a7b466d3345cd7b6653f97fa
- SSDEEP 196608:XZGmuEsR2/LGPLCXOKODxH5qFlXS47dV2MANpvrjVbEKGWIoS3:XZGnEsREJLODBWlX3d+NpvdHIoU
- TLSH T121B61233A1908066D289193956736F3879F8975D5EB0CCB3F7E4ECE22D624E1E72710A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Suspicious use of NtSetInformationThreadHideFromDebugger