General
- Target 2026-08-25_8dccbf73ef7059b07cd5910cea0f7d7c_amadey_coinminer_elex_glassworm_graphican_remcos_rhadamanthys_smoke-loader_stop
- Size 1.2MB
- Sample260826-wgmd3stdkg
- SHA256 1156641a32d8dd396261a43f0bc95b44e5cb7b4553e5fb39f3c2aa46806cfb8e
- MD5 8dccbf73ef7059b07cd5910cea0f7d7c
- SHA1 a4e3f42aafaa5fd0d314a9565fd6fcd2545b995d
- SHA512 dbdd1bb9a068a84794ae7ea8f93f4606342fa339b87dc8f6be1ba0c125c174adb76599d3c3b6d845f959e9d9406f3e8e77d2f1c017fe27d0664ecb3188343724
- SSDEEP 12288:WSvO2x9mONvKRILSFnOkx2LIaxy4n5FAQjU/Lik8CQ3uEuZ9oawhtB:VvO2xJKRI2FOkx2LFE4scUQPxuZ9Q
- TLSH T162456C21F650C035D4B6453685FE07BAA6787D21571166CBB3C43B6B2FB32D2AA31B0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-25_8dccbf73ef7059b07cd5910cea0f7d7c_amadey_coinminer_elex_glassworm_graphican_remcos_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-25_8dccbf73ef7059b07cd5910cea0f7d7c_amadey_coinminer_elex_glassworm_graphican_remcos_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-25_8dccbf73ef7059b07cd5910cea0f7d7c_amadey_coinminer_elex_glassworm_graphican_remcos_rhadamanthys_smoke-loader_stop
- Size 1.2MB
- SHA256 1156641a32d8dd396261a43f0bc95b44e5cb7b4553e5fb39f3c2aa46806cfb8e
- MD5 8dccbf73ef7059b07cd5910cea0f7d7c
- SHA1 a4e3f42aafaa5fd0d314a9565fd6fcd2545b995d
- SHA512 dbdd1bb9a068a84794ae7ea8f93f4606342fa339b87dc8f6be1ba0c125c174adb76599d3c3b6d845f959e9d9406f3e8e77d2f1c017fe27d0664ecb3188343724
- SSDEEP 12288:WSvO2x9mONvKRILSFnOkx2LIaxy4n5FAQjU/Lik8CQ3uEuZ9oawhtB:VvO2xJKRI2FOkx2LFE4scUQPxuZ9Q
- TLSH T162456C21F650C035D4B6453685FE07BAA6787D21571166CBB3C43B6B2FB32D2AA31B0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory