General
- Target 2026-08-18_be88751b7a09c9cb9a8912e55a5fae7d_amadey_coinminer_elex_remcos_smoke-loader
- Size 576KB
- Sample260818-fff8nsek81
- SHA256 563cb89db9a32a6e2c83b4ab25b34ea24ecde353ab4c73afc8665495c53b5836
- MD5 be88751b7a09c9cb9a8912e55a5fae7d
- SHA1 1cfb980da7ff675a557dbce0ea22eb15d7b4812f
- SHA512 5a06f91e33697a62ff45e0c71b61e23cf2ee547d9762a13cdf20a0db61a3699921d9041248e7e501b933aed574fd814eca2b519f906afef0d3d427d6d552cace
- SSDEEP 12288:RqXUHkUXe39sOkx2LIan5FAQjU/Lik8CQ3K:RjHPOSOkx2LFscUQPK
- TLSH T1EBC47C31E201C03AD1A74572C6FE0BAFA568BD24431562C7A3D479762FF72D2AA3171E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-18_be88751b7a09c9cb9a8912e55a5fae7d_amadey_coinminer_elex_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-18_be88751b7a09c9cb9a8912e55a5fae7d_amadey_coinminer_elex_remcos_smoke-loader
- Size 576KB
- SHA256 563cb89db9a32a6e2c83b4ab25b34ea24ecde353ab4c73afc8665495c53b5836
- MD5 be88751b7a09c9cb9a8912e55a5fae7d
- SHA1 1cfb980da7ff675a557dbce0ea22eb15d7b4812f
- SHA512 5a06f91e33697a62ff45e0c71b61e23cf2ee547d9762a13cdf20a0db61a3699921d9041248e7e501b933aed574fd814eca2b519f906afef0d3d427d6d552cace
- SSDEEP 12288:RqXUHkUXe39sOkx2LIan5FAQjU/Lik8CQ3K:RjHPOSOkx2LFscUQPK
- TLSH T1EBC47C31E201C03AD1A74572C6FE0BAFA568BD24431562C7A3D479762FF72D2AA3171E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory