General
- Target 2026-08-20_194bef9e638522bd135fd07b78277c33_amadey_coinminer_elex_glassworm_kwampirs_smoke-loader_stop
- Size 1.2MB
- Sample260820-15pxbsbm9t
- SHA256 b19b9db07fc8388d31a4bc0bea78902d928962ce2037e98dd83f5ac6c78b70ff
- MD5 194bef9e638522bd135fd07b78277c33
- SHA1 df63b8ec85b5d41212adf412eccc20bb8d6db27e
- SHA512 7d1fa554d4812ac723e56f8c2bb292089d815602b47a0a5057ac35f3d30d969deff5d5f5d1b68644173db8e448579139fd6b7c65cedf0b06c4fb623c7501e817
- SSDEEP 24576:pvO2xJKRw2kOkx2LFRvhuZ98Es8k3OH3C0rQ6+y:pHHKe2WQXhuTtS0rQi
- TLSH T1B2559E31E641C036D4A70176C6B94BBFA578BD22072555CBE3D43A6A2F722D2AE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-20_194bef9e638522bd135fd07b78277c33_amadey_coinminer_elex_glassworm_kwampirs_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_194bef9e638522bd135fd07b78277c33_amadey_coinminer_elex_glassworm_kwampirs_smoke-loader_stop.exe
Resource
win11ltsc2024-20260710-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_194bef9e638522bd135fd07b78277c33_amadey_coinminer_elex_glassworm_kwampirs_smoke-loader_stop
- Size 1.2MB
- SHA256 b19b9db07fc8388d31a4bc0bea78902d928962ce2037e98dd83f5ac6c78b70ff
- MD5 194bef9e638522bd135fd07b78277c33
- SHA1 df63b8ec85b5d41212adf412eccc20bb8d6db27e
- SHA512 7d1fa554d4812ac723e56f8c2bb292089d815602b47a0a5057ac35f3d30d969deff5d5f5d1b68644173db8e448579139fd6b7c65cedf0b06c4fb623c7501e817
- SSDEEP 24576:pvO2xJKRw2kOkx2LFRvhuZ98Es8k3OH3C0rQ6+y:pHHKe2WQXhuTtS0rQi
- TLSH T1B2559E31E641C036D4A70176C6B94BBFA578BD22072555CBE3D43A6A2F722D2AE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory