General
- Target 2026-07-13_158ee274440d077fb781182b5669cd30_amadey_coinminer_elex_glassworm_kwampirs_smoke-loader_stop
- Size 1.2MB
- Sample260713-269tkacw8s
- SHA256 697d3ec53c1a3bd889f2598097a97c65e0c4b96e7f8dd8817768aad4d173b7f6
- MD5 158ee274440d077fb781182b5669cd30
- SHA1 5d21ca96d8b5b707a22dbf61b0bea95d0212e3bb
- SHA512 dbe9279ae9938f5bcdd926efb60033df5f146bdba35a87fbbf977804a33aad9bed905b24592692d0031256d5f509d2e221fb5077a3dac0a201bce89acbaeec72
- SSDEEP 24576:+vO2xJKRh2kOkx2LFxNhuZ98Es8k3OH3C0rQ6+y:+HHKX2WQthuTtS0rQi
- TLSH T12B559E31E641C036C4A70176C6B94BBFA578BD22172555CBE3D43A6A2F723D2AE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-13_158ee274440d077fb781182b5669cd30_amadey_coinminer_elex_glassworm_kwampirs_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-13_158ee274440d077fb781182b5669cd30_amadey_coinminer_elex_glassworm_kwampirs_smoke-loader_stop
- Size 1.2MB
- SHA256 697d3ec53c1a3bd889f2598097a97c65e0c4b96e7f8dd8817768aad4d173b7f6
- MD5 158ee274440d077fb781182b5669cd30
- SHA1 5d21ca96d8b5b707a22dbf61b0bea95d0212e3bb
- SHA512 dbe9279ae9938f5bcdd926efb60033df5f146bdba35a87fbbf977804a33aad9bed905b24592692d0031256d5f509d2e221fb5077a3dac0a201bce89acbaeec72
- SSDEEP 24576:+vO2xJKRh2kOkx2LFxNhuZ98Es8k3OH3C0rQ6+y:+HHKX2WQthuTtS0rQi
- TLSH T12B559E31E641C036C4A70176C6B94BBFA578BD22172555CBE3D43A6A2F723D2AE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory