General
- Target 2026-08-03_bc5c230aa412961a0aa5620c6e845b14_amadey_coinminer_elex_glassworm_graphican_remcos_rhadamanthys_smoke-loader_stop
- Size 960KB
- Sample260803-rdzssasvdw
- SHA256 9ad9135a23a53973a5570c585528bc809ff95e6b00ed199a3bf220d3f4023fd2
- MD5 bc5c230aa412961a0aa5620c6e845b14
- SHA1 4c6a3b17f49c326e115f8369bcbefe1dc5544278
- SHA512 0941172226214ea5fa7a1ef06ef5311eee85228e5fc90b33bc702a5278bba7d4df9df0ba469fb704773e2c125e0aedbbc2dcaa3d6d0d1153cca1f8676b5c29b8
- SSDEEP 24576:TvO2xJKRI2FOkx2LFEvcUQPxuZ98Es8k3OQ:THHKO29QG5QZuT2
- TLSH T156257C31E641C03AD4A741B686BA4BBFA4787D25031565C7E3D43E6A2FB22D27E3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_bc5c230aa412961a0aa5620c6e845b14_amadey_coinminer_elex_glassworm_graphican_remcos_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_bc5c230aa412961a0aa5620c6e845b14_amadey_coinminer_elex_glassworm_graphican_remcos_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_bc5c230aa412961a0aa5620c6e845b14_amadey_coinminer_elex_glassworm_graphican_remcos_rhadamanthys_smoke-loader_stop
- Size 960KB
- SHA256 9ad9135a23a53973a5570c585528bc809ff95e6b00ed199a3bf220d3f4023fd2
- MD5 bc5c230aa412961a0aa5620c6e845b14
- SHA1 4c6a3b17f49c326e115f8369bcbefe1dc5544278
- SHA512 0941172226214ea5fa7a1ef06ef5311eee85228e5fc90b33bc702a5278bba7d4df9df0ba469fb704773e2c125e0aedbbc2dcaa3d6d0d1153cca1f8676b5c29b8
- SSDEEP 24576:TvO2xJKRI2FOkx2LFEvcUQPxuZ98Es8k3OQ:THHKO29QG5QZuT2
- TLSH T156257C31E641C03AD4A741B686BA4BBFA4787D25031565C7E3D43E6A2FB22D27E3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory