General
- Target 2026-10-22_d7a302953d3158a96360aacff70bfe84_amadey_coinminer_elex_remcos_smoke-loader
- Size 576KB
- Sample261023-wr9mcsty2k
- SHA256 da73e41169a139f93d3ad142994daea358d30dda7b39947dd5ca5e6488c4140b
- MD5 d7a302953d3158a96360aacff70bfe84
- SHA1 0d477d61320ae4856f83dee385e92e1be4870c78
- SHA512 d5e96ef38e0dce79d038e53ff92b80ea9a33a8f2d340843aaaca3bf08b5078f5f478e0e42398b865c7a03434130379e45602282f61f103d0cfb485e7c0e83dd9
- SSDEEP 12288:sqXUHkUXe39sOkx2LIan5FAQjU/Lik8CQ3K:sjHPOSOkx2LFscUQPK
- TLSH T1A3C47C31E201C03AD1A74572C6FE0BAFA568BD24431562C7A3D479762FF72D2AA3171E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-22_d7a302953d3158a96360aacff70bfe84_amadey_coinminer_elex_remcos_smoke-loader.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_d7a302953d3158a96360aacff70bfe84_amadey_coinminer_elex_remcos_smoke-loader
- Size 576KB
- SHA256 da73e41169a139f93d3ad142994daea358d30dda7b39947dd5ca5e6488c4140b
- MD5 d7a302953d3158a96360aacff70bfe84
- SHA1 0d477d61320ae4856f83dee385e92e1be4870c78
- SHA512 d5e96ef38e0dce79d038e53ff92b80ea9a33a8f2d340843aaaca3bf08b5078f5f478e0e42398b865c7a03434130379e45602282f61f103d0cfb485e7c0e83dd9
- SSDEEP 12288:sqXUHkUXe39sOkx2LIan5FAQjU/Lik8CQ3K:sjHPOSOkx2LFscUQPK
- TLSH T1A3C47C31E201C03AD1A74572C6FE0BAFA568BD24431562C7A3D479762FF72D2AA3171E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory