General
- Target 2026-04-15_0f18ed1eb411714dd11e4d0b69371308_amadey_coinminer_elex_glassworm_graphican_remcos_rhadamanthys_smoke-loader_stop
- Size 896KB
- Sample260415-epc2yahx3t
- SHA256 3afce439e5f3c5e6d46bc87023bdfef3c0fc084b9bd3b8ffdc1c2ace3732bb7b
- MD5 0f18ed1eb411714dd11e4d0b69371308
- SHA1 5ae8cbab68e3a42c3d8d6a382e4a96b1d036b25e
- SHA512 5f686e072d94b9e5f10300295ff222e1350f9e2f05684d6e60ad6929eceb8c96b4d0e0f3643e344f1a071caf2cf4b4667dda6cf817f03f13b8efe5a05825672f
- SSDEEP 12288:aSvO2x9mONvKRILSFnOkx2LIaxya5FAQjU/Lik8CQ3uEuYyybAsLAk1:BvO2xJKRI2FOkx2LFEvcUQPxu6Es8k1
- TLSH T18C157C31E641C03AD4A7457686BA0BBFA5787D22131565C7E3D43E662FB32D2BA3130E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-15_0f18ed1eb411714dd11e4d0b69371308_amadey_coinminer_elex_glassworm_graphican_remcos_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-15_0f18ed1eb411714dd11e4d0b69371308_amadey_coinminer_elex_glassworm_graphican_remcos_rhadamanthys_smoke-loader_stop.exe
Resource
win11-20260130-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-15_0f18ed1eb411714dd11e4d0b69371308_amadey_coinminer_elex_glassworm_graphican_remcos_rhadamanthys_smoke-loader_stop
- Size 896KB
- SHA256 3afce439e5f3c5e6d46bc87023bdfef3c0fc084b9bd3b8ffdc1c2ace3732bb7b
- MD5 0f18ed1eb411714dd11e4d0b69371308
- SHA1 5ae8cbab68e3a42c3d8d6a382e4a96b1d036b25e
- SHA512 5f686e072d94b9e5f10300295ff222e1350f9e2f05684d6e60ad6929eceb8c96b4d0e0f3643e344f1a071caf2cf4b4667dda6cf817f03f13b8efe5a05825672f
- SSDEEP 12288:aSvO2x9mONvKRILSFnOkx2LIaxya5FAQjU/Lik8CQ3uEuYyybAsLAk1:BvO2xJKRI2FOkx2LFEvcUQPxu6Es8k1
- TLSH T18C157C31E641C03AD4A7457686BA0BBFA5787D22131565C7E3D43E662FB32D2BA3130E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory