General
- Target 2026-07-29_6ab28662c47c56c3895720599498ae3b_amadey_coinminer_elex_glassworm_graphican_kwampirs_mafia_remcos_rhadamanthys_smoke-loader_stop
- Size 1024KB
- Sample260729-s7tdjaah44
- SHA256 c0026cf69d23f850dc368a94b25754634099b0975a4a2522992a3aecb8772f01
- MD5 6ab28662c47c56c3895720599498ae3b
- SHA1 c562c9e22c72b5964df5d453b3512961d4a3d3a2
- SHA512 23db4e4fbc1df21a4532a2717d7f086ebc533a505dbafb47fe53c4bb33058ea9418038dce6c7dcb6a51b248bcf83f238266eaa298058ebd3f06841ba14b22476
- SSDEEP 24576:tvO2xJKRI2FOkx2LFEvcUQPxuZ98Es8k3OH3C0rQb:tHHKO29Qm5QZuTtS0rQb
- TLSH T169258C31E641C036D5A7447586BA4BBFA8787D26031564C7E3D43E6A2FB22D2BA3170F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-29_6ab28662c47c56c3895720599498ae3b_amadey_coinminer_elex_glassworm_graphican_kwampirs_mafia.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-29_6ab28662c47c56c3895720599498ae3b_amadey_coinminer_elex_glassworm_graphican_kwampirs_mafia.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_6ab28662c47c56c3895720599498ae3b_amadey_coinminer_elex_glassworm_graphican_kwampirs_mafia_remcos_rhadamanthys_smoke-loader_stop
- Size 1024KB
- SHA256 c0026cf69d23f850dc368a94b25754634099b0975a4a2522992a3aecb8772f01
- MD5 6ab28662c47c56c3895720599498ae3b
- SHA1 c562c9e22c72b5964df5d453b3512961d4a3d3a2
- SHA512 23db4e4fbc1df21a4532a2717d7f086ebc533a505dbafb47fe53c4bb33058ea9418038dce6c7dcb6a51b248bcf83f238266eaa298058ebd3f06841ba14b22476
- SSDEEP 24576:tvO2xJKRI2FOkx2LFEvcUQPxuZ98Es8k3OH3C0rQb:tHHKO29Qm5QZuTtS0rQb
- TLSH T169258C31E641C036D5A7447586BA4BBFA8787D26031564C7E3D43E6A2FB22D2BA3170F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory