General
- Target 2026-08-10_391d0b5cff57b64a6bd62043e819ae52_amadey_coinminer_elex_glassworm_kwampirs_smoke-loader_stop
- Size 1.2MB
- Sample260810-mpymms1ygz
- SHA256 a0e062a67b6e2838a2a8c3fa06d7f7df5f25c8b0ecfc91dd45e3184c2abfcf2a
- MD5 391d0b5cff57b64a6bd62043e819ae52
- SHA1 ebf91ea6371209139e41de77cfd5a1173a46a58e
- SHA512 25e44f41ba0ce654909046fb8ff35235a547ed010acb119621ce0ffb8df4c2269d36322512364f67cc37f00589c1572471294b26340cf06ae208a80399f4234f
- SSDEEP 24576:fvO2xJKRw2kOkx2LFRvhuZ98Es8k3OH3C0rQ6+y:fHHKe2WQXhuTtS0rQi
- TLSH T1BC559E31E641C036D4A70176C6B94BBFA578BD22072555CBE3D43A6A2F722D2AE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-10_391d0b5cff57b64a6bd62043e819ae52_amadey_coinminer_elex_glassworm_kwampirs_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_391d0b5cff57b64a6bd62043e819ae52_amadey_coinminer_elex_glassworm_kwampirs_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_391d0b5cff57b64a6bd62043e819ae52_amadey_coinminer_elex_glassworm_kwampirs_smoke-loader_stop
- Size 1.2MB
- SHA256 a0e062a67b6e2838a2a8c3fa06d7f7df5f25c8b0ecfc91dd45e3184c2abfcf2a
- MD5 391d0b5cff57b64a6bd62043e819ae52
- SHA1 ebf91ea6371209139e41de77cfd5a1173a46a58e
- SHA512 25e44f41ba0ce654909046fb8ff35235a547ed010acb119621ce0ffb8df4c2269d36322512364f67cc37f00589c1572471294b26340cf06ae208a80399f4234f
- SSDEEP 24576:fvO2xJKRw2kOkx2LFRvhuZ98Es8k3OH3C0rQ6+y:fHHKe2WQXhuTtS0rQi
- TLSH T1BC559E31E641C036D4A70176C6B94BBFA578BD22072555CBE3D43A6A2F722D2AE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory