General
- Target 2026-05-03_2cfdb4101c2ad8a7169839f23e69d3ef_amadey_coinminer_elex_glassworm_graphican_remcos_rhadamanthys_smoke-loader_stop
- Size 896KB
- Sample260503-mfxc8aav9q
- SHA256 484329a390ec2602065f3538d53bbe0c6cb651918b534f7f9a37ed3953c9706e
- MD5 2cfdb4101c2ad8a7169839f23e69d3ef
- SHA1 80080f0a463e15e74fbdef3be03a12c57f802aac
- SHA512 90d64ea21d828a58893717b6414e65ec520ebd279ac819e119011fad7806301fa8ede981b48c6a1cbc4ded2706b770ea9bfdbd414146b8872f0daf97ed4a8157
- SSDEEP 12288:QSvO2x9mONvKRILSFnOkx2LIaxya5FAQjU/Lik8CQ3uEuYyybAsLAk1:LvO2xJKRI2FOkx2LFEvcUQPxu6Es8k1
- TLSH T16D157C31E641C03AD4A7457686BA0BBFA5787D22131565C7E3D43E662FB32D2BA3130E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-03_2cfdb4101c2ad8a7169839f23e69d3ef_amadey_coinminer_elex_glassworm_graphican_remcos_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260130-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-03_2cfdb4101c2ad8a7169839f23e69d3ef_amadey_coinminer_elex_glassworm_graphican_remcos_rhadamanthys_smoke-loader_stop.exe
Resource
win11-20260130-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-03_2cfdb4101c2ad8a7169839f23e69d3ef_amadey_coinminer_elex_glassworm_graphican_remcos_rhadamanthys_smoke-loader_stop
- Size 896KB
- SHA256 484329a390ec2602065f3538d53bbe0c6cb651918b534f7f9a37ed3953c9706e
- MD5 2cfdb4101c2ad8a7169839f23e69d3ef
- SHA1 80080f0a463e15e74fbdef3be03a12c57f802aac
- SHA512 90d64ea21d828a58893717b6414e65ec520ebd279ac819e119011fad7806301fa8ede981b48c6a1cbc4ded2706b770ea9bfdbd414146b8872f0daf97ed4a8157
- SSDEEP 12288:QSvO2x9mONvKRILSFnOkx2LIaxya5FAQjU/Lik8CQ3uEuYyybAsLAk1:LvO2xJKRI2FOkx2LFEvcUQPxu6Es8k1
- TLSH T16D157C31E641C03AD4A7457686BA0BBFA5787D22131565C7E3D43E662FB32D2BA3130E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory