General
- Target 2026-08-24_ce911e8c851e03f2d95a5a221f152431_amadey_coinminer_elex_remcos_smoke-loader
- Size 576KB
- Sample260825-a2v13adp2v
- SHA256 147055f29c2f0a0e4fc2d188f2f53176e63ab532b8e8a7a4c4a700110670416d
- MD5 ce911e8c851e03f2d95a5a221f152431
- SHA1 fc5dfabb4ae6ed66afc26923c8417991d2fcb8e6
- SHA512 6df779e8a0994dc2e28d813eb446cd66e07e8a88ba54c9da51802f582db533b89af18a8c9eab4ded1b2c0206af69f2d7663bde3e88941de80a7c01b96610b733
- SSDEEP 12288:GqXUHkUXe39sOkx2LIan5FAQjU/Lik8CQ3K:GjHPOSOkx2LFscUQPK
- TLSH T183C47C31E201C03AD1A74572C6FE0BAFA568BD24431562C7A3D479762FF72D2AA3171E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-24_ce911e8c851e03f2d95a5a221f152431_amadey_coinminer_elex_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-24_ce911e8c851e03f2d95a5a221f152431_amadey_coinminer_elex_remcos_smoke-loader
- Size 576KB
- SHA256 147055f29c2f0a0e4fc2d188f2f53176e63ab532b8e8a7a4c4a700110670416d
- MD5 ce911e8c851e03f2d95a5a221f152431
- SHA1 fc5dfabb4ae6ed66afc26923c8417991d2fcb8e6
- SHA512 6df779e8a0994dc2e28d813eb446cd66e07e8a88ba54c9da51802f582db533b89af18a8c9eab4ded1b2c0206af69f2d7663bde3e88941de80a7c01b96610b733
- SSDEEP 12288:GqXUHkUXe39sOkx2LIan5FAQjU/Lik8CQ3K:GjHPOSOkx2LFscUQPK
- TLSH T183C47C31E201C03AD1A74572C6FE0BAFA568BD24431562C7A3D479762FF72D2AA3171E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory