General
- Target 2026-09-29_49b1abfbb5b9090e0ad5d703a79e55d8_amadey_coinminer_elex_glassworm_kwampirs_smoke-loader_stop
- Size 1.2MB
- Sample260930-b85phsszc1
- SHA256 9e8620c82ebe0aa86cbab7f481e18405d78fb126f13f193d7702c13f6b043431
- MD5 49b1abfbb5b9090e0ad5d703a79e55d8
- SHA1 2f3ccb28e602a7e9ac11a3d772e84f6c4703ce60
- SHA512 0c5b321e5f51fdedfa254f7c147512685c21a29931ee1f71ba22a48150ba1bb845f1ebe92a05ef684215d935e2dc864db9ea7f3f2e00f0fee7027f8006a7084a
- SSDEEP 24576:qvO2xJKRw2kOkx2LFRvhuZ98Es8k3OH3C0rQ6+y:qHHKe2WQXhuTtS0rQi
- TLSH T1B0559E31E641C036D4A70176C6B94BBFA578BD22072555CBE3D43E6A2F722D2AE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-09-29_49b1abfbb5b9090e0ad5d703a79e55d8_amadey_coinminer_elex_glassworm_kwampirs_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-29_49b1abfbb5b9090e0ad5d703a79e55d8_amadey_coinminer_elex_glassworm_kwampirs_smoke-loader_stop
- Size 1.2MB
- SHA256 9e8620c82ebe0aa86cbab7f481e18405d78fb126f13f193d7702c13f6b043431
- MD5 49b1abfbb5b9090e0ad5d703a79e55d8
- SHA1 2f3ccb28e602a7e9ac11a3d772e84f6c4703ce60
- SHA512 0c5b321e5f51fdedfa254f7c147512685c21a29931ee1f71ba22a48150ba1bb845f1ebe92a05ef684215d935e2dc864db9ea7f3f2e00f0fee7027f8006a7084a
- SSDEEP 24576:qvO2xJKRw2kOkx2LFRvhuZ98Es8k3OH3C0rQ6+y:qHHKe2WQXhuTtS0rQi
- TLSH T1B0559E31E641C036D4A70176C6B94BBFA578BD22072555CBE3D43E6A2F722D2AE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory