Analysis
- max time kernel
148s - max time network
114s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
12/07/2026, 17:48
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-12_0a3e5cfa6659c0f5c9efa04c733b82f0_amadey_coinminer_elex_glassworm_smoke-loader.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-12_0a3e5cfa6659c0f5c9efa04c733b82f0_amadey_coinminer_elex_glassworm_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
General
- Target 2026-07-12_0a3e5cfa6659c0f5c9efa04c733b82f0_amadey_coinminer_elex_glassworm_smoke-loader.exe
- Size 3.8MB
- Sample260712-wdx2eaex7k
- SHA256 8555f9c9679eabc8435dbbd266f93e373037bc2ea7d47ecd659b439a951bb9c6
- MD5 0a3e5cfa6659c0f5c9efa04c733b82f0
- SHA1 2f8ece779b90af0cf0d4f655ce6fe011a4686ff7
- SHA512 e2adcb2940649e28886b9ce29f65c4b1fc6761566d511ef1185f4b9bb2c88e1c4f632de18db27a752bca3e0b9581c74d791a427d949165a844c286f6f14c3797
- SSDEEP 98304:IOlxyx1rYP44YaQqtGeIEAGoZXvFYfyCw:IOS7dqtGeIhGQXNYfRw
- TLSH T1DD166C02F6408039FAD201FAC3B64978EE789F141389A1D383D5B8F96B765D2783675B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-07-12_0a3e5cfa6659c0f5c9efa04c733b82f0_amadey_coinminer_elex_glassworm_smoke-loader.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-07-12_0a3e5cfa6659c0f5c9efa04c733b82f0_amadey_coinminer_elex_glassworm_smoke-loader.exe"C:\Users\Admin\AppData\Local\Temp\2026-07-12_0a3e5cfa6659c0f5c9efa04c733b82f0_amadey_coinminer_elex_glassworm_smoke-loader.exe"1⤵
- System Location Discovery: System Language Discovery
PID:4324