General
- Target 2026-10-13_ce039f03dddfa601c75c6766f9f80185_amadey_coinminer_elex_glassworm_graphican_remcos_rhadamanthys_smoke-loader_stop
- Size 1.2MB
- Sample261014-gffsksef72
- SHA256 87387a9c8788ee6b5f26f35c71695ccaab63f88e8c18ff7a6339af8eb5f566a2
- MD5 ce039f03dddfa601c75c6766f9f80185
- SHA1 caae12d446e72e6a16101234cf029cf7191f12e9
- SHA512 552a4c3174f6d211a1eb426a2fec8e05f92381050331a0b6a9dd5a98b5c38c2a90f6a4ea11154b78daf100d4f65d4178f6fee56d28c932071f0e1669f85d9d97
- SSDEEP 12288:ESvO2x9mONvKRILSFnOkx2LIaxy4n5FAQjU/Lik8CQ3uEuZ9oawhtB:3vO2xJKRI2FOkx2LFE4scUQPxuZ9Q
- TLSH T159456C21F650C035D4B6453685FE07BAA6787D21571166CBB3C43B6B2FB32D2AA31B0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-13_ce039f03dddfa601c75c6766f9f80185_amadey_coinminer_elex_glassworm_graphican_remcos_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-13_ce039f03dddfa601c75c6766f9f80185_amadey_coinminer_elex_glassworm_graphican_remcos_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-13_ce039f03dddfa601c75c6766f9f80185_amadey_coinminer_elex_glassworm_graphican_remcos_rhadamanthys_smoke-loader_stop
- Size 1.2MB
- SHA256 87387a9c8788ee6b5f26f35c71695ccaab63f88e8c18ff7a6339af8eb5f566a2
- MD5 ce039f03dddfa601c75c6766f9f80185
- SHA1 caae12d446e72e6a16101234cf029cf7191f12e9
- SHA512 552a4c3174f6d211a1eb426a2fec8e05f92381050331a0b6a9dd5a98b5c38c2a90f6a4ea11154b78daf100d4f65d4178f6fee56d28c932071f0e1669f85d9d97
- SSDEEP 12288:ESvO2x9mONvKRILSFnOkx2LIaxy4n5FAQjU/Lik8CQ3uEuZ9oawhtB:3vO2xJKRI2FOkx2LFE4scUQPxuZ9Q
- TLSH T159456C21F650C035D4B6453685FE07BAA6787D21571166CBB3C43B6B2FB32D2AA31B0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory