General
- Target 2026-10-22_e34d91759434819939b83cac6ad37551_amadey_coinminer_elex_glassworm_smoke-loader_stop
- Size 1024KB
- Sample261023-tktw8acw3s
- SHA256 b30b03866a04caf32999cb843cc80a803b25f171befaa327ee141d0a9e24ef41
- MD5 e34d91759434819939b83cac6ad37551
- SHA1 3a938db03413cc7a6f57ebc8e80c5b0b191ec971
- SHA512 eaf431d1724a2934311372b0a5d3b12fdb691775b989177ef36e3d1f2c5de48b12298e90e7f37d4beaba355656f9e2f39023ea20e6451ac947a937d71a41aa21
- SSDEEP 12288:vSvO2x9mONvKRwLSFtsOkx2LIa+ya5FA+EuZ9oawhtyyb2:avO2xJKRw2kOkx2LFRvhuZ98y
- TLSH T183257B21F641C036C4A74176C6BA4BAFB978BD21532555CBA3C43A5A2F732D2AE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-22_e34d91759434819939b83cac6ad37551_amadey_coinminer_elex_glassworm_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_e34d91759434819939b83cac6ad37551_amadey_coinminer_elex_glassworm_smoke-loader_stop
- Size 1024KB
- SHA256 b30b03866a04caf32999cb843cc80a803b25f171befaa327ee141d0a9e24ef41
- MD5 e34d91759434819939b83cac6ad37551
- SHA1 3a938db03413cc7a6f57ebc8e80c5b0b191ec971
- SHA512 eaf431d1724a2934311372b0a5d3b12fdb691775b989177ef36e3d1f2c5de48b12298e90e7f37d4beaba355656f9e2f39023ea20e6451ac947a937d71a41aa21
- SSDEEP 12288:vSvO2x9mONvKRwLSFtsOkx2LIa+ya5FA+EuZ9oawhtyyb2:avO2xJKRw2kOkx2LFRvhuZ98y
- TLSH T183257B21F641C036C4A74176C6BA4BAFB978BD21532555CBA3C43A5A2F732D2AE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory