General
- Target 2026-07-11_2a21e5ef71b3419be4d94b932d45f7cc_amadey_coinminer_elex_glassworm_kwampirs_smoke-loader_stop
- Size 1.2MB
- Sample260711-dns64ads6y
- SHA256 d9c6ad0a6f21cb34a803d75fbc0657f4605767660c20370444585851c4185020
- MD5 2a21e5ef71b3419be4d94b932d45f7cc
- SHA1 3d6ccecd14d8f4bb30f122c12191e0dcc73618ad
- SHA512 54f5633f9989551c2c112406362222f8353353d2f242eead1f565eb2be8c70984b185bafd65e4f56f3378a0e7ab34918a732259d8046e6f9b70bfa4a8f7a9e8f
- SSDEEP 24576:xvO2xJKRh2kOkx2LFxNhuZ98Es8k3OH3C0rQ6+y:xHHKX2WQthuTtS0rQi
- TLSH T194559E31E641C036C4A70176C6B94BBFA578BD22172555CBE3D43A6A2F723D2AE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-11_2a21e5ef71b3419be4d94b932d45f7cc_amadey_coinminer_elex_glassworm_kwampirs_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-11_2a21e5ef71b3419be4d94b932d45f7cc_amadey_coinminer_elex_glassworm_kwampirs_smoke-loader_stop
- Size 1.2MB
- SHA256 d9c6ad0a6f21cb34a803d75fbc0657f4605767660c20370444585851c4185020
- MD5 2a21e5ef71b3419be4d94b932d45f7cc
- SHA1 3d6ccecd14d8f4bb30f122c12191e0dcc73618ad
- SHA512 54f5633f9989551c2c112406362222f8353353d2f242eead1f565eb2be8c70984b185bafd65e4f56f3378a0e7ab34918a732259d8046e6f9b70bfa4a8f7a9e8f
- SSDEEP 24576:xvO2xJKRh2kOkx2LFxNhuZ98Es8k3OH3C0rQ6+y:xHHKX2WQthuTtS0rQi
- TLSH T194559E31E641C036C4A70176C6B94BBFA578BD22172555CBE3D43A6A2F723D2AE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory