General
- Target 2026-08-18_b2660e59600fc323991bc75e24fc46a9_amadey_coinminer_elex_glassworm_graphican_remcos_rhadamanthys_smoke-loader_stop
- Size 1.2MB
- Sample260818-yz9nfabb73
- SHA256 f8568ac320b520c5b02a3520fd6687ff835e99a28488a5f2dbaa58f46e4a14f5
- MD5 b2660e59600fc323991bc75e24fc46a9
- SHA1 5d172156fd0faa2b778e05b7d6a460f5a4ee7d8e
- SHA512 60c17f199d3889b8d40099d9b7e3b187af74a569dc7bcf30dc0c2a82873976e7e97868f04bec398920c48817a6c19d603a07ca3dce179f62a16bd5ebafbf6939
- SSDEEP 12288:ASvO2x9mONvKRILSFnOkx2LIaxy4n5FAQjU/Lik8CQ3uEuZ9oawhtB:bvO2xJKRI2FOkx2LFE4scUQPxuZ9Q
- TLSH T10C456C21F650C035D4B6453685FE07BAA6787D21571166CBB3C43B6B2FB32D2AA31B0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-18_b2660e59600fc323991bc75e24fc46a9_amadey_coinminer_elex_glassworm_graphican_remcos_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-18_b2660e59600fc323991bc75e24fc46a9_amadey_coinminer_elex_glassworm_graphican_remcos_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-18_b2660e59600fc323991bc75e24fc46a9_amadey_coinminer_elex_glassworm_graphican_remcos_rhadamanthys_smoke-loader_stop
- Size 1.2MB
- SHA256 f8568ac320b520c5b02a3520fd6687ff835e99a28488a5f2dbaa58f46e4a14f5
- MD5 b2660e59600fc323991bc75e24fc46a9
- SHA1 5d172156fd0faa2b778e05b7d6a460f5a4ee7d8e
- SHA512 60c17f199d3889b8d40099d9b7e3b187af74a569dc7bcf30dc0c2a82873976e7e97868f04bec398920c48817a6c19d603a07ca3dce179f62a16bd5ebafbf6939
- SSDEEP 12288:ASvO2x9mONvKRILSFnOkx2LIaxy4n5FAQjU/Lik8CQ3uEuZ9oawhtB:bvO2xJKRI2FOkx2LFE4scUQPxuZ9Q
- TLSH T10C456C21F650C035D4B6453685FE07BAA6787D21571166CBB3C43B6B2FB32D2AA31B0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory