General
- Target 2026-08-06_4a1508a0b167f777c3eb5d06f29ee6c3_amadey_coinminer_elex_glassworm_kwampirs_smoke-loader_stop
- Size 1.2MB
- Sample260806-26ptdscj8v
- SHA256 1b9c7989f3492b0c97c91ba631b3f207df608a711fc86c620175577438cbf1c2
- MD5 4a1508a0b167f777c3eb5d06f29ee6c3
- SHA1 e35ae47f13e57a00a9ad2ebdfbbbd82568479e3e
- SHA512 b79d9a8639ae83a8ccc7cd8ee4739fc2f5ff67650427d1d9e4bfc854ee07c589ed728ee1a1cc1c2daffa031b8855acaf2ceeb8e57f8cc330fe04ff7ca74c23a7
- SSDEEP 24576:3vO2xJKRw2kOkx2LFRvhuZ98Es8k3OH3C0rQ6+y:3HHKe2WQXhuTtS0rQi
- TLSH T174559E31E641C036D4A70176C6B94BBFA578BD22072555CBE3D43A6A2F722D2AE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-06_4a1508a0b167f777c3eb5d06f29ee6c3_amadey_coinminer_elex_glassworm_kwampirs_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-06_4a1508a0b167f777c3eb5d06f29ee6c3_amadey_coinminer_elex_glassworm_kwampirs_smoke-loader_stop
- Size 1.2MB
- SHA256 1b9c7989f3492b0c97c91ba631b3f207df608a711fc86c620175577438cbf1c2
- MD5 4a1508a0b167f777c3eb5d06f29ee6c3
- SHA1 e35ae47f13e57a00a9ad2ebdfbbbd82568479e3e
- SHA512 b79d9a8639ae83a8ccc7cd8ee4739fc2f5ff67650427d1d9e4bfc854ee07c589ed728ee1a1cc1c2daffa031b8855acaf2ceeb8e57f8cc330fe04ff7ca74c23a7
- SSDEEP 24576:3vO2xJKRw2kOkx2LFRvhuZ98Es8k3OH3C0rQ6+y:3HHKe2WQXhuTtS0rQi
- TLSH T174559E31E641C036D4A70176C6B94BBFA578BD22072555CBE3D43A6A2F722D2AE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory