General
- Target 2026-07-12_17cf3f4b69a88960939456c544f14132_amadey_coinminer_elex_glassworm_graphican_kwampirs_mafia_remcos_rhadamanthys_smoke-loader_stop
- Size 1.6MB
- Sample260712-waeqnaew8k
- SHA256 04d4c7a763cc1f450f79e24f4d2c69d36f6111321966a3a9ab1447f4fe560bee
- MD5 17cf3f4b69a88960939456c544f14132
- SHA1 a65fff24e32477d4a078c83634f0aff3a3e365c6
- SHA512 f5260de3eeba0be5123d6d1dd8f685090570224eafa1e04313f27c8b16529b5e5ec03ae189b8ec077f21194aba2185b59eb2568bc1390f3ef0408a643fac0073
- SSDEEP 24576:YvO2xJKRI2FOkx2LFEvcUQPxuZ98Es8k3OH3C0rQ6+84FqoBsqMwLooSHazBvKRC:YHHKO29Qm5QZuTtS0rQM4PSxSFlv+a
- TLSH T11D759E22E341C072D567117146BA0B7EA938BE62077495C7E3D4FD752F722E2AA3630E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-12_17cf3f4b69a88960939456c544f14132_amadey_coinminer_elex_glassworm_graphican_kwampirs_mafia.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-12_17cf3f4b69a88960939456c544f14132_amadey_coinminer_elex_glassworm_graphican_kwampirs_mafia.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-12_17cf3f4b69a88960939456c544f14132_amadey_coinminer_elex_glassworm_graphican_kwampirs_mafia_remcos_rhadamanthys_smoke-loader_stop
- Size 1.6MB
- SHA256 04d4c7a763cc1f450f79e24f4d2c69d36f6111321966a3a9ab1447f4fe560bee
- MD5 17cf3f4b69a88960939456c544f14132
- SHA1 a65fff24e32477d4a078c83634f0aff3a3e365c6
- SHA512 f5260de3eeba0be5123d6d1dd8f685090570224eafa1e04313f27c8b16529b5e5ec03ae189b8ec077f21194aba2185b59eb2568bc1390f3ef0408a643fac0073
- SSDEEP 24576:YvO2xJKRI2FOkx2LFEvcUQPxuZ98Es8k3OH3C0rQ6+84FqoBsqMwLooSHazBvKRC:YHHKO29Qm5QZuTtS0rQM4PSxSFlv+a
- TLSH T11D759E22E341C072D567117146BA0B7EA938BE62077495C7E3D4FD752F722E2AA3630E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Executes dropped EXE
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
Drops file in System32 directory