General
- Target 2026-08-19_a8a4da3fa8d402a73ae6f14a85b9a818_amadey_coinminer_elex_glassworm_kwampirs_smoke-loader_stop
- Size 1.2MB
- Sample260819-wnrx5sgf96
- SHA256 34ea90e9587f9c9b617675a2137677c2d88ae7b6ba70814204437661b3131596
- MD5 a8a4da3fa8d402a73ae6f14a85b9a818
- SHA1 acba005ad3d792786626b5f9bd3aecaa8bade1b5
- SHA512 c7e5478d6edcd02a557371afe74bed42e4b50064f78c48ecf48de6909aa06369ee0a817fafe023f6d73a1585aac06393618245ed25ae429c463001e427f80f17
- SSDEEP 24576:2vO2xJKRw2kOkx2LFRvhuZ98Es8k3OH3C0rQ6+y:2HHKe2WQXhuTtS0rQi
- TLSH T12A559E31E641C036D4A70176C6B94BBFA578BD22072555CBE3D43A6A2F722D2AE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-19_a8a4da3fa8d402a73ae6f14a85b9a818_amadey_coinminer_elex_glassworm_kwampirs_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-19_a8a4da3fa8d402a73ae6f14a85b9a818_amadey_coinminer_elex_glassworm_kwampirs_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_a8a4da3fa8d402a73ae6f14a85b9a818_amadey_coinminer_elex_glassworm_kwampirs_smoke-loader_stop
- Size 1.2MB
- SHA256 34ea90e9587f9c9b617675a2137677c2d88ae7b6ba70814204437661b3131596
- MD5 a8a4da3fa8d402a73ae6f14a85b9a818
- SHA1 acba005ad3d792786626b5f9bd3aecaa8bade1b5
- SHA512 c7e5478d6edcd02a557371afe74bed42e4b50064f78c48ecf48de6909aa06369ee0a817fafe023f6d73a1585aac06393618245ed25ae429c463001e427f80f17
- SSDEEP 24576:2vO2xJKRw2kOkx2LFRvhuZ98Es8k3OH3C0rQ6+y:2HHKe2WQXhuTtS0rQi
- TLSH T12A559E31E641C036D4A70176C6B94BBFA578BD22072555CBE3D43A6A2F722D2AE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory