General
- Target 2026-08-14_e41f00c9b7da0d3e55553a254b62b40b_amadey_coinminer_darkgate_elex_glassworm_kwampirs_remcos_smoke-loader_stop
- Size 1.7MB
- Sample260814-lfl2tazfrb
- SHA256 19b041bed526c47811755962bff9bf6a37a85194eb8f392b1c6b7e277e7cc8c7
- MD5 e41f00c9b7da0d3e55553a254b62b40b
- SHA1 68825a657752dafd33b42dd204e658deb5a6c467
- SHA512 ac948e45f9b9214de77337738ab35e84c535a8f3a74b6e9c56ae46b62034a6c7eab6ebab7d1bc160f243b9bf235c8d9b2a151ef16620558138c2601bdc631115
- SSDEEP 24576:9vO2xJKRh2kOkx2LFxNcUQPxuZ98Es8k3OH3C0rQ6+8pKJJFo3Q+qdCOKIbA0I:9HHKX2WQt5QZuTtS0rQMYOQ+q8CE0I
- TLSH T103859E21B791C036D4AB01758AB98BAEA578BD31072551C7B3C47A7E5FB12D2AE3130F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-14_e41f00c9b7da0d3e55553a254b62b40b_amadey_coinminer_darkgate_elex_glassworm_kwampirs_remcos_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-14_e41f00c9b7da0d3e55553a254b62b40b_amadey_coinminer_darkgate_elex_glassworm_kwampirs_remcos_smoke-loader_stop
- Size 1.7MB
- SHA256 19b041bed526c47811755962bff9bf6a37a85194eb8f392b1c6b7e277e7cc8c7
- MD5 e41f00c9b7da0d3e55553a254b62b40b
- SHA1 68825a657752dafd33b42dd204e658deb5a6c467
- SHA512 ac948e45f9b9214de77337738ab35e84c535a8f3a74b6e9c56ae46b62034a6c7eab6ebab7d1bc160f243b9bf235c8d9b2a151ef16620558138c2601bdc631115
- SSDEEP 24576:9vO2xJKRh2kOkx2LFxNcUQPxuZ98Es8k3OH3C0rQ6+8pKJJFo3Q+qdCOKIbA0I:9HHKX2WQt5QZuTtS0rQMYOQ+q8CE0I
- TLSH T103859E21B791C036D4AB01758AB98BAEA578BD31072551C7B3C47A7E5FB12D2AE3130F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory