General
- Target 2026-08-10_159eef39708358bfdfb24dfc2b5a8923_amadey_coinminer_elex_glassworm_kwampirs_smoke-loader_stop
- Size 1.2MB
- Sample260810-pmw25stwb1
- SHA256 a0a661e620a36ae35d5171cc62dd5a0aba4a8108d0dc83a9af61ab0957c243a7
- MD5 159eef39708358bfdfb24dfc2b5a8923
- SHA1 6d5dfd8e838802d71a558eb968bae8f9bbf5266d
- SHA512 bd21267f081bbdaf06544ca39956f1f992e707d3f5fd2f58441a8cacd6a0cfa4964904cc350d08783716ab5b274d5b1b3809e497445101db666b4158b7a2042c
- SSDEEP 24576:JvO2xJKRw2kOkx2LFRvhuZ98Es8k3OH3C0rQ6+y:JHHKe2WQXhuTtS0rQi
- TLSH T1B8559E31E641C036D4A70176C6B94BBFA578BD22072555CBE3D43A6A2F722D2AE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-10_159eef39708358bfdfb24dfc2b5a8923_amadey_coinminer_elex_glassworm_kwampirs_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_159eef39708358bfdfb24dfc2b5a8923_amadey_coinminer_elex_glassworm_kwampirs_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_159eef39708358bfdfb24dfc2b5a8923_amadey_coinminer_elex_glassworm_kwampirs_smoke-loader_stop
- Size 1.2MB
- SHA256 a0a661e620a36ae35d5171cc62dd5a0aba4a8108d0dc83a9af61ab0957c243a7
- MD5 159eef39708358bfdfb24dfc2b5a8923
- SHA1 6d5dfd8e838802d71a558eb968bae8f9bbf5266d
- SHA512 bd21267f081bbdaf06544ca39956f1f992e707d3f5fd2f58441a8cacd6a0cfa4964904cc350d08783716ab5b274d5b1b3809e497445101db666b4158b7a2042c
- SSDEEP 24576:JvO2xJKRw2kOkx2LFRvhuZ98Es8k3OH3C0rQ6+y:JHHKe2WQXhuTtS0rQi
- TLSH T1B8559E31E641C036D4A70176C6B94BBFA578BD22072555CBE3D43A6A2F722D2AE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory