General
- Target 2026-07-07_2ee79b454a145e7621807f26b8bf9e34_amadey_coinminer_elex_glassworm_graphican_remcos_rhadamanthys_smoke-loader_stop
- Size 3.3MB
- Sample260708-bdql4sgz4x
- SHA256 f56c02395aa9bcc4ad614195e4eb5faa59a8420eb0662dec6618d179c637ed49
- MD5 2ee79b454a145e7621807f26b8bf9e34
- SHA1 fca124af3aa93fdafa4714a10a0927f279dac964
- SHA512 5122a3bf446466679f43380ba7246925297364b8dd3fae34a93ecd060dc6513133653d2f9b2e8543a92ac18ec573e6e40e04df98de14148b653520b80baf1320
- SSDEEP 24576:ZvO2xJKRI2dOkx2LFAC///wjHPOnOkx2LFhJbKkKF/eMNPjxdnQbzU:ZHHKO2FQN///wTGHQd9KFeMxQbzU
- TLSH T195F54B12FB90C636D16A573048AB439A6BB5FD405B128BDF62D4B31F0F732869E31E58
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-07_2ee79b454a145e7621807f26b8bf9e34_amadey_coinminer_elex_glassworm_graphican_remcos_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-07_2ee79b454a145e7621807f26b8bf9e34_amadey_coinminer_elex_glassworm_graphican_remcos_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260706-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-07_2ee79b454a145e7621807f26b8bf9e34_amadey_coinminer_elex_glassworm_graphican_remcos_rhadamanthys_smoke-loader_stop
- Size 3.3MB
- SHA256 f56c02395aa9bcc4ad614195e4eb5faa59a8420eb0662dec6618d179c637ed49
- MD5 2ee79b454a145e7621807f26b8bf9e34
- SHA1 fca124af3aa93fdafa4714a10a0927f279dac964
- SHA512 5122a3bf446466679f43380ba7246925297364b8dd3fae34a93ecd060dc6513133653d2f9b2e8543a92ac18ec573e6e40e04df98de14148b653520b80baf1320
- SSDEEP 24576:ZvO2xJKRI2dOkx2LFAC///wjHPOnOkx2LFhJbKkKF/eMNPjxdnQbzU:ZHHKO2FQN///wTGHQd9KFeMxQbzU
- TLSH T195F54B12FB90C636D16A573048AB439A6BB5FD405B128BDF62D4B31F0F732869E31E58
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory