400c097098702b8114da9e67bd2ad4ae5e3aee4ded5aa3acff36fbc582442c31

Analysis

max time kernel
149s
max time network
137s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/10/2026, 23:00

Target
2026-10-02_eec13c2a804968a0f04142660467f119_amadey_coinminer_elex_luca-stealer_njrat_remcos_smoke-loader.exe
Size 1.2MB
Sample261002-2yzcvsaa23
SHA256 400c097098702b8114da9e67bd2ad4ae5e3aee4ded5aa3acff36fbc582442c31
MD5 eec13c2a804968a0f04142660467f119
SHA1 9ae05b358165b367b1c685647baf3ae901320e49
SHA512 3d068b5e2514621b1f6bfea5847940fe40384a939572910454b8ba7e579a0148e1b467aa9ff62bca32123d3f4d9385aa5f86b7305897174347f89434c02072b7
SSDEEP 24576:nJPnA09jzKzxyiDrJXDZhupvRnWoZ62V:JP3vmrjhuNRnWoZ
TLSH
T1D6458D01B7D68533F4B20530DDB98BBA5638BD305B3089CBB3D52A2E1D706D26A35B5B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

9^/10

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
behavioral1/memory/1220-0-0x0000000000100000-0x000000000022E000-memory.dmp	UPX

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3620	1220	WerFault.exe	87

C:\Users\Admin\AppData\Local\Temp\2026-10-02_eec13c2a804968a0f04142660467f119_amadey_coinminer_elex_luca-stealer_njrat_remcos_smoke-loader.exe
"C:\Users\Admin\AppData\Local\Temp\2026-10-02_eec13c2a804968a0f04142660467f119_amadey_coinminer_elex_luca-stealer_njrat_remcos_smoke-loader.exe"
1⤵
PID:1220
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1220 -s 292
  2⤵
  - Program crash
  PID:3620

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 1220 -ip 1220
1⤵
PID:3904

memory/1220-0-0x0000000000100000-0x000000000022E000-memory.dmp

Download