General
- Target 2026-05-06_3b93806c4981e9339d7d002d31fed7ba_amadey_coinminer_elex_glassworm_graphican_kwampirs_mafia_remcos_rhadamanthys_smoke-loader_stop
- Size 1.2MB
- Sample260506-thttfaas7p
- SHA256 dce97a845708c62e09f09c28e22d130b913ae2e00701c76484d5a9889fdc0a1c
- MD5 3b93806c4981e9339d7d002d31fed7ba
- SHA1 2d42eb1b80870fb4b50fb4d5a36edb6eedcb3c9b
- SHA512 c1550d139132e125e989fd1d60c92ebd262d0451769c22907eb80a2b27a672548cc76e97805f74bd1fd75d152f8c1fc211cc41122ea3a69fcffcda48c32e8013
- SSDEEP 24576:KvO2xJKRI2FOkx2LFEvcUQPxuZ98Es8k3OH3C0rQ6+8pKJ3:KHHKO29QG5QZuTtS0rQMY9
- TLSH T1E6557D21F741C036D5AB017186B94BAFA578BD61072555C7B3C87E3A2FB22D2AE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-06_3b93806c4981e9339d7d002d31fed7ba_amadey_coinminer_elex_glassworm_graphican_kwampirs_mafia.exe
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-06_3b93806c4981e9339d7d002d31fed7ba_amadey_coinminer_elex_glassworm_graphican_kwampirs_mafia.exe
Resource
win11-20260130-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-06_3b93806c4981e9339d7d002d31fed7ba_amadey_coinminer_elex_glassworm_graphican_kwampirs_mafia_remcos_rhadamanthys_smoke-loader_stop
- Size 1.2MB
- SHA256 dce97a845708c62e09f09c28e22d130b913ae2e00701c76484d5a9889fdc0a1c
- MD5 3b93806c4981e9339d7d002d31fed7ba
- SHA1 2d42eb1b80870fb4b50fb4d5a36edb6eedcb3c9b
- SHA512 c1550d139132e125e989fd1d60c92ebd262d0451769c22907eb80a2b27a672548cc76e97805f74bd1fd75d152f8c1fc211cc41122ea3a69fcffcda48c32e8013
- SSDEEP 24576:KvO2xJKRI2FOkx2LFEvcUQPxuZ98Es8k3OH3C0rQ6+8pKJ3:KHHKO29QG5QZuTtS0rQMY9
- TLSH T1E6557D21F741C036D5AB017186B94BAFA578BD61072555C7B3C87E3A2FB22D2AE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Executes dropped EXE
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
Drops file in System32 directory