General
- Target 2026-08-05_2b22462999ed4817c6f916a3ee7b4d77_amadey_coinminer_elex_glassworm_hijackloader_magicrat_remcos_rhadamanthys_smoke-loader_stealc_stop
- Size 24.5MB
- Sample260805-1ect3sgm7s
- SHA256 8708c50e3260dc4a0e6c96c3c69506009ddf1c79a7415c1bfdf67cd1c88b45cc
- MD5 2b22462999ed4817c6f916a3ee7b4d77
- SHA1 46cb30c5e6d0bdd1e72e92c5db3ac428fee97c89
- SHA512 dd7ad0bd40e2fe1950e6239b8903b36790c00d150aab75a8135945122e3a051793a4621ed7c92a513cf7e7eebe863a45de5b72fab7e10d1d3250e6baa9fafe09
- SSDEEP 393216:BZ7yy8it6WKa1tqSmIhVrkDb1PXopwbugCNXabOU10sbKwjP12vTCJsv6tWKFduV:BpHHqQ6bXCNXeOBSKw712vTRl
- TLSH T118478C58FA4350F4EB2351B1824BF77B56306E15C462EEF7EB89FE89B8326213406725
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-05_2b22462999ed4817c6f916a3ee7b4d77_amadey_coinminer_elex_glassworm_hijackloader_magicrat_re.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_2b22462999ed4817c6f916a3ee7b4d77_amadey_coinminer_elex_glassworm_hijackloader_magicrat_re.exe
Resource
win11ltsc2024-20260710-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_2b22462999ed4817c6f916a3ee7b4d77_amadey_coinminer_elex_glassworm_hijackloader_magicrat_remcos_rhadamanthys_smoke-loader_stealc_stop
- Size 24.5MB
- SHA256 8708c50e3260dc4a0e6c96c3c69506009ddf1c79a7415c1bfdf67cd1c88b45cc
- MD5 2b22462999ed4817c6f916a3ee7b4d77
- SHA1 46cb30c5e6d0bdd1e72e92c5db3ac428fee97c89
- SHA512 dd7ad0bd40e2fe1950e6239b8903b36790c00d150aab75a8135945122e3a051793a4621ed7c92a513cf7e7eebe863a45de5b72fab7e10d1d3250e6baa9fafe09
- SSDEEP 393216:BZ7yy8it6WKa1tqSmIhVrkDb1PXopwbugCNXabOU10sbKwjP12vTCJsv6tWKFduV:BpHHqQ6bXCNXeOBSKw712vTRl
- TLSH T118478C58FA4350F4EB2351B1824BF77B56306E15C462EEF7EB89FE89B8326213406725
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing base64 encoded User Agent
-
UPX dump on OEP (original entry point)