General
- Target 2026-09-08_008fc3993a69afe961e247159b51d57a_amadey_coinminer_elex_glassworm_kwampirs_smoke-loader_stop
- Size 1.2MB
- Sample260910-jvkfeshq7z
- SHA256 f8b8b0e1c1e3bc98015b6073d61f343872b151ce940baec45d61fe5bd60bfb91
- MD5 008fc3993a69afe961e247159b51d57a
- SHA1 1654a5a58eeb5ac2daa54a84b6e29d94f6f130b7
- SHA512 9124c96dc423bb30d86061e259d6bc566006e7a8873d26b5c77a32f6ca6c350970c504cd405a5fc3775387bb0f5dc01aaf5b77d52947e64858d6f1f8df82ff66
- SSDEEP 24576:ivO2xJKRw2kOkx2LFRvhuZ98Es8k3OH3C0rQ6+y:iHHKe2WQXhuTtS0rQi
- TLSH T16D559E31E641C036D4A70176C6B94BBFA578BD22072555CBE3D43A6A2F723D2AE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-09-08_008fc3993a69afe961e247159b51d57a_amadey_coinminer_elex_glassworm_kwampirs_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-08_008fc3993a69afe961e247159b51d57a_amadey_coinminer_elex_glassworm_kwampirs_smoke-loader_stop
- Size 1.2MB
- SHA256 f8b8b0e1c1e3bc98015b6073d61f343872b151ce940baec45d61fe5bd60bfb91
- MD5 008fc3993a69afe961e247159b51d57a
- SHA1 1654a5a58eeb5ac2daa54a84b6e29d94f6f130b7
- SHA512 9124c96dc423bb30d86061e259d6bc566006e7a8873d26b5c77a32f6ca6c350970c504cd405a5fc3775387bb0f5dc01aaf5b77d52947e64858d6f1f8df82ff66
- SSDEEP 24576:ivO2xJKRw2kOkx2LFRvhuZ98Es8k3OH3C0rQ6+y:iHHKe2WQXhuTtS0rQi
- TLSH T16D559E31E641C036D4A70176C6B94BBFA578BD22072555CBE3D43A6A2F723D2AE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory