General
- Target 2026-07-11_033558691b913774dd875e4c1f5523a9_amadey_coinminer_elex_glassworm_kwampirs_smoke-loader_stop
- Size 1.2MB
- Sample260711-ca7lwsav2q
- SHA256 77c268571285e7121834014e433cffd6a93ec5c1c2fd4ec892c4c045ef4a678e
- MD5 033558691b913774dd875e4c1f5523a9
- SHA1 95f9dbfe3db9468127606f2272c5811597908c40
- SHA512 eb3f7260e53b98637224f300844dd5884309c298826e1ff51f70a9c8ce8f5af60580be35d132e0e67e46a7f96e2a8f5b1ff4b6d00d4f71b216635dc17c28dd30
- SSDEEP 24576:IvO2xJKRh2kOkx2LFxNhuZ98Es8k3OH3C0rQ6+y:IHHKX2WQthuTtS0rQi
- TLSH T16F559E31E641C036C4A70176C6B94BBFA578BD22172555CBE3D43A6A2F723D2AE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-11_033558691b913774dd875e4c1f5523a9_amadey_coinminer_elex_glassworm_kwampirs_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-11_033558691b913774dd875e4c1f5523a9_amadey_coinminer_elex_glassworm_kwampirs_smoke-loader_stop
- Size 1.2MB
- SHA256 77c268571285e7121834014e433cffd6a93ec5c1c2fd4ec892c4c045ef4a678e
- MD5 033558691b913774dd875e4c1f5523a9
- SHA1 95f9dbfe3db9468127606f2272c5811597908c40
- SHA512 eb3f7260e53b98637224f300844dd5884309c298826e1ff51f70a9c8ce8f5af60580be35d132e0e67e46a7f96e2a8f5b1ff4b6d00d4f71b216635dc17c28dd30
- SSDEEP 24576:IvO2xJKRh2kOkx2LFxNhuZ98Es8k3OH3C0rQ6+y:IHHKX2WQthuTtS0rQi
- TLSH T16F559E31E641C036C4A70176C6B94BBFA578BD22172555CBE3D43A6A2F723D2AE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory