General
- Target 2026-05-05_26f71fc9c20b19058c470e4c3b3fef91_amadey_coinminer_elex_glassworm_graphican_remcos_rhadamanthys_smoke-loader_stop
- Size 896KB
- Sample260505-eepmzsbz2m
- SHA256 27f7ac48f5b37ec9faacf0a603d6e81ce4f22c3cf300019b594ec48d92ce39cb
- MD5 26f71fc9c20b19058c470e4c3b3fef91
- SHA1 cdf20bc1613d76ef77e68343d58ebd62932a2cfa
- SHA512 75b979d17b4455c284ef5c2d02d241271d85e2608567cefe2a77387d550ffb56dc275e56e5035abf18dcb1e48e21e2e47608ef964830f73ecb259e54c6acb31f
- SSDEEP 12288:xSvO2x9mONvKRILSFnOkx2LIaxya5FAQjU/Lik8CQ3uEuYyybAsLAk1:YvO2xJKRI2FOkx2LFEvcUQPxu6Es8k1
- TLSH T1E6157C31E641C03AD4A7457686BA0BBFA5787D22131565C7E3D43E662FB32D2BA3130E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-05_26f71fc9c20b19058c470e4c3b3fef91_amadey_coinminer_elex_glassworm_graphican_remcos_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260130-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-05_26f71fc9c20b19058c470e4c3b3fef91_amadey_coinminer_elex_glassworm_graphican_remcos_rhadamanthys_smoke-loader_stop.exe
Resource
win11-20260130-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-05_26f71fc9c20b19058c470e4c3b3fef91_amadey_coinminer_elex_glassworm_graphican_remcos_rhadamanthys_smoke-loader_stop
- Size 896KB
- SHA256 27f7ac48f5b37ec9faacf0a603d6e81ce4f22c3cf300019b594ec48d92ce39cb
- MD5 26f71fc9c20b19058c470e4c3b3fef91
- SHA1 cdf20bc1613d76ef77e68343d58ebd62932a2cfa
- SHA512 75b979d17b4455c284ef5c2d02d241271d85e2608567cefe2a77387d550ffb56dc275e56e5035abf18dcb1e48e21e2e47608ef964830f73ecb259e54c6acb31f
- SSDEEP 12288:xSvO2x9mONvKRILSFnOkx2LIaxya5FAQjU/Lik8CQ3uEuYyybAsLAk1:YvO2xJKRI2FOkx2LFEvcUQPxu6Es8k1
- TLSH T1E6157C31E641C03AD4A7457686BA0BBFA5787D22131565C7E3D43E662FB32D2BA3130E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory