General
- Target 2026-07-10_6c94bebd9445df5f40171cd9ee011f92_amadey_coinminer_elex_glassworm_remcos_smoke-loader
- Size 832KB
- Sample260710-2h7pasc19r
- SHA256 22dc2ebbcdcfa05a7416919ed60ac96518b6c0345711cc9a15994db800212b61
- MD5 6c94bebd9445df5f40171cd9ee011f92
- SHA1 13f1a5f60806cfa5d1acc29434f04f980d3be197
- SHA512 a1bc1b9d037da19a174aff90d79b0a4be1b1e5c89e31ace95f14f895886b800d98bb6427434aed6101aff0e54d6fda280374900a39d8e370dddf293e0babc3e8
- SSDEEP 12288:8qXUHkUXe39sOkx2LIan5FAQjU/Lik8CQ3uEuZ9oawhtyybAsLAkQ:8jHPOSOkx2LFscUQPxuZ98Es8kQ
- TLSH T1D3059D21E202C13AD49701B2C6BE0BAFA5687D15432561C7E3D87D6A2FB61D2BE3171F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-10_6c94bebd9445df5f40171cd9ee011f92_amadey_coinminer_elex_glassworm_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-10_6c94bebd9445df5f40171cd9ee011f92_amadey_coinminer_elex_glassworm_remcos_smoke-loader
- Size 832KB
- SHA256 22dc2ebbcdcfa05a7416919ed60ac96518b6c0345711cc9a15994db800212b61
- MD5 6c94bebd9445df5f40171cd9ee011f92
- SHA1 13f1a5f60806cfa5d1acc29434f04f980d3be197
- SHA512 a1bc1b9d037da19a174aff90d79b0a4be1b1e5c89e31ace95f14f895886b800d98bb6427434aed6101aff0e54d6fda280374900a39d8e370dddf293e0babc3e8
- SSDEEP 12288:8qXUHkUXe39sOkx2LIan5FAQjU/Lik8CQ3uEuZ9oawhtyybAsLAkQ:8jHPOSOkx2LFscUQPxuZ98Es8kQ
- TLSH T1D3059D21E202C13AD49701B2C6BE0BAFA5687D15432561C7E3D87D6A2FB61D2BE3171F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory