General
- Target 2026-06-28_f005e5952f931482e49d734e5dff9fec_amadey_coinminer_elex_glassworm_memery_rhadamanthys_smoke-loader_stealc_vidar
- Size 5.4MB
- Sample260628-wnqebabs9p
- SHA256 aa59e264341de322b5a1b90704d0292fbed6c382f0a0716a61fa0c50ce3f29ac
- MD5 f005e5952f931482e49d734e5dff9fec
- SHA1 c498228c6a7e95aa65c49c181cbd37cc471fb8b9
- SHA512 28e76547446908ce0db24dee28fa2d1a6e6b3e07de6157fd9fa3b7b1398fb73f255746abf2cafe97204591ebc741bf66fa2ddc942a230f99e3e0b7412d93188f
- SSDEEP 98304:cMbnsqA8bPk5HyUN8k5h/wDdEoNiV4I/hwAf1wAoTamiDW6PT:Tb3bPk5HyC8k5h/wDdEoNiV4I/WWwA7T
- TLSH T1F4465B40E6C380F5EEA345749193F36FA731BD4285208DEAFA587A46EF33691492F319
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-06-28_f005e5952f931482e49d734e5dff9fec_amadey_coinminer_elex_glassworm_memery_rhadamanthys_smoke-loader_stealc_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-28_f005e5952f931482e49d734e5dff9fec_amadey_coinminer_elex_glassworm_memery_rhadamanthys_smoke-loader_stealc_vidar
- Size 5.4MB
- SHA256 aa59e264341de322b5a1b90704d0292fbed6c382f0a0716a61fa0c50ce3f29ac
- MD5 f005e5952f931482e49d734e5dff9fec
- SHA1 c498228c6a7e95aa65c49c181cbd37cc471fb8b9
- SHA512 28e76547446908ce0db24dee28fa2d1a6e6b3e07de6157fd9fa3b7b1398fb73f255746abf2cafe97204591ebc741bf66fa2ddc942a230f99e3e0b7412d93188f
- SSDEEP 98304:cMbnsqA8bPk5HyUN8k5h/wDdEoNiV4I/hwAf1wAoTamiDW6PT:Tb3bPk5HyC8k5h/wDdEoNiV4I/WWwA7T
- TLSH T1F4465B40E6C380F5EEA345749193F36FA731BD4285208DEAFA587A46EF33691492F319
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Windows executables referencing non-Windows User-Agents
-
UPX dump on OEP (original entry point)
-
Drops file in System32 directory