General
- Target 2026-08-24_f4c101ccf70e76d8ad6051b8f02bd149_amadey_coinminer_elex_glassworm_kwampirs_smoke-loader_stop
- Size 1.2MB
- Sample260824-yqt7dsshjf
- SHA256 84cdce7d199ddd2c5e2bbef07647b30b2b68dbe25a1acd2e3f4f33824b0b04e0
- MD5 f4c101ccf70e76d8ad6051b8f02bd149
- SHA1 688f2831888ec5cd491455ce367d011405f3fc5c
- SHA512 63b71bccf49aaf47e9bcf83a09b6fa6f4fea48ca0168f0f063f9b98ce9ab9a9de4e096113be640e73785a4396fb8d05c9b8c16e8fe8b2feb92aa97b7728683af
- SSDEEP 24576:6vO2xJKRw2kOkx2LFRvhuZ98Es8k3OH3C0rQ6+y:6HHKe2WQXhuTtS0rQi
- TLSH T189559E31E641C036D4A70176C6B94BBFA578BD22072555CBE3D43E6A2F722D2AE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-24_f4c101ccf70e76d8ad6051b8f02bd149_amadey_coinminer_elex_glassworm_kwampirs_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-24_f4c101ccf70e76d8ad6051b8f02bd149_amadey_coinminer_elex_glassworm_kwampirs_smoke-loader_stop
- Size 1.2MB
- SHA256 84cdce7d199ddd2c5e2bbef07647b30b2b68dbe25a1acd2e3f4f33824b0b04e0
- MD5 f4c101ccf70e76d8ad6051b8f02bd149
- SHA1 688f2831888ec5cd491455ce367d011405f3fc5c
- SHA512 63b71bccf49aaf47e9bcf83a09b6fa6f4fea48ca0168f0f063f9b98ce9ab9a9de4e096113be640e73785a4396fb8d05c9b8c16e8fe8b2feb92aa97b7728683af
- SSDEEP 24576:6vO2xJKRw2kOkx2LFRvhuZ98Es8k3OH3C0rQ6+y:6HHKe2WQXhuTtS0rQi
- TLSH T189559E31E641C036D4A70176C6B94BBFA578BD22072555CBE3D43E6A2F722D2AE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory