General
- Target 2026-08-11_cbbaa53b2f5375854cc69e101632754a_amadey_coinminer_elex_glassworm_njrat_smoke-loader_stop
- Size 3.0MB
- Sample260811-va8s3ahn3x
- SHA256 105ea084c7407fd4c6d1a46b7665cdcf70100f400a0288e8bb6e10bd22c49ced
- MD5 cbbaa53b2f5375854cc69e101632754a
- SHA1 24aeb170a856d07e4483f29f97837395725d010e
- SHA512 f5d747381f452edc7a44b3b2a5d57a334a9f77ef3ab5a2c4d7942be572a3dd987737a29826287b2c396167e8ae510936344e5f2ddb95e8dc0bd36da8d625f4ae
- SSDEEP 49152:5A/JuTQKqVmgbQIzZMPXpB91rHpn/qKmNAOaG6IOY/:O/whnLrHp/qKm2/Sb/
- TLSH T1E0E55953EB914AE8E39D0536DF544150E72AF2256BEF13A27428420DDE83387BF61A3D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-11_cbbaa53b2f5375854cc69e101632754a_amadey_coinminer_elex_glassworm_njrat_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-11_cbbaa53b2f5375854cc69e101632754a_amadey_coinminer_elex_glassworm_njrat_smoke-loader_stop
- Size 3.0MB
- SHA256 105ea084c7407fd4c6d1a46b7665cdcf70100f400a0288e8bb6e10bd22c49ced
- MD5 cbbaa53b2f5375854cc69e101632754a
- SHA1 24aeb170a856d07e4483f29f97837395725d010e
- SHA512 f5d747381f452edc7a44b3b2a5d57a334a9f77ef3ab5a2c4d7942be572a3dd987737a29826287b2c396167e8ae510936344e5f2ddb95e8dc0bd36da8d625f4ae
- SSDEEP 49152:5A/JuTQKqVmgbQIzZMPXpB91rHpn/qKmNAOaG6IOY/:O/whnLrHp/qKm2/Sb/
- TLSH T1E0E55953EB914AE8E39D0536DF544150E72AF2256BEF13A27428420DDE83387BF61A3D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory