General
- Target 2026-08-25_fe31ada10b35951fe2f935aa70a8b88c_amadey_coinminer_elex_remcos_smoke-loader
- Size 576KB
- Sample260826-aa3ltsxvbw
- SHA256 a6e90428b4ec3b7d4dcd26916adea91a8f2c35cad61e7c33f3f88d42436cd964
- MD5 fe31ada10b35951fe2f935aa70a8b88c
- SHA1 e856551daa9f92518f33dc5f8333b9e8744f6b9e
- SHA512 9a1ecff5bb2644fcd41e8b009cc86be76d5fe5ad53df11b9620658e52e82421c09bdfba04e1b398df317fcdebabf37385cec1f1c7e506568a4d84876154c6c93
- SSDEEP 12288:TqXUHkUXe39sOkx2LIan5FAQjU/Lik8CQ3K:TjHPOSOkx2LFscUQPK
- TLSH T136C47C31E201C03AD1A74572C6FE0BAFA568BD24431562C7A3D479762FF72D2AA3171E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-25_fe31ada10b35951fe2f935aa70a8b88c_amadey_coinminer_elex_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-25_fe31ada10b35951fe2f935aa70a8b88c_amadey_coinminer_elex_remcos_smoke-loader
- Size 576KB
- SHA256 a6e90428b4ec3b7d4dcd26916adea91a8f2c35cad61e7c33f3f88d42436cd964
- MD5 fe31ada10b35951fe2f935aa70a8b88c
- SHA1 e856551daa9f92518f33dc5f8333b9e8744f6b9e
- SHA512 9a1ecff5bb2644fcd41e8b009cc86be76d5fe5ad53df11b9620658e52e82421c09bdfba04e1b398df317fcdebabf37385cec1f1c7e506568a4d84876154c6c93
- SSDEEP 12288:TqXUHkUXe39sOkx2LIan5FAQjU/Lik8CQ3K:TjHPOSOkx2LFscUQPK
- TLSH T136C47C31E201C03AD1A74572C6FE0BAFA568BD24431562C7A3D479762FF72D2AA3171E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory