General
- Target 2026-08-09_70dba6122fff45a949fa41cdc83bc39a_amadey_coinminer_elex_glassworm_kwampirs_smoke-loader_stop
- Size 1.2MB
- Sample260809-a3kays1wax
- SHA256 363e94190caccda93c305b9a582543450504fcdfd5a20c227ad3bbf65b756caf
- MD5 70dba6122fff45a949fa41cdc83bc39a
- SHA1 313ec1369769b03127c2dc599a9617d644e26afe
- SHA512 d694d09957304e24a6ce825d0865ae3b671215f0b6b71532ba69a79b3c2d0d4bb903a8a4c4635281235089686b8fbe854d54bfb5008915d3dd580d17308172e0
- SSDEEP 24576:vvO2xJKRw2kOkx2LFRvhuZ98Es8k3OH3C0rQ6+y:vHHKe2WQXhuTtS0rQi
- TLSH T19C559E31E641C036D4A70176C6B94BBFA578BD22072555CBE3D43A6A2F722D2AE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-09_70dba6122fff45a949fa41cdc83bc39a_amadey_coinminer_elex_glassworm_kwampirs_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_70dba6122fff45a949fa41cdc83bc39a_amadey_coinminer_elex_glassworm_kwampirs_smoke-loader_stop
- Size 1.2MB
- SHA256 363e94190caccda93c305b9a582543450504fcdfd5a20c227ad3bbf65b756caf
- MD5 70dba6122fff45a949fa41cdc83bc39a
- SHA1 313ec1369769b03127c2dc599a9617d644e26afe
- SHA512 d694d09957304e24a6ce825d0865ae3b671215f0b6b71532ba69a79b3c2d0d4bb903a8a4c4635281235089686b8fbe854d54bfb5008915d3dd580d17308172e0
- SSDEEP 24576:vvO2xJKRw2kOkx2LFRvhuZ98Es8k3OH3C0rQ6+y:vHHKe2WQXhuTtS0rQi
- TLSH T19C559E31E641C036D4A70176C6B94BBFA578BD22072555CBE3D43A6A2F722D2AE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory