General
- Target 2026-10-22_9b2285b42c9a394c44b2bd5c9fb337f8_amadey_coinminer_elex_glassworm_smoke-loader_stop
- Size 1024KB
- Sample261024-dwe97shv5j
- SHA256 b91bd3d989e47b497cd034f17015d1836b3bed9568da82fb97ffa805a136bb05
- MD5 9b2285b42c9a394c44b2bd5c9fb337f8
- SHA1 0f9b99fd338a975b971148382d11ae0b9e9393df
- SHA512 d9253b9fd965c81e26c9ad2ba5205c4306cdfb0161d4dc733030cf72fd81c409115b1d04350296fb57e76bbea28e89f1c752b452dbb3c6a54e0c5b91a7d2fc5f
- SSDEEP 12288:nSvO2x9mONvKRwLSFtsOkx2LIa+ya5FA+EuZ9oawhtyyb2:SvO2xJKRw2kOkx2LFRvhuZ98y
- TLSH T1CF257B21F641C036C4A74176C6BA4BAFB978BD21532555CBA3C43A5A2F732D2AE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-22_9b2285b42c9a394c44b2bd5c9fb337f8_amadey_coinminer_elex_glassworm_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_9b2285b42c9a394c44b2bd5c9fb337f8_amadey_coinminer_elex_glassworm_smoke-loader_stop
- Size 1024KB
- SHA256 b91bd3d989e47b497cd034f17015d1836b3bed9568da82fb97ffa805a136bb05
- MD5 9b2285b42c9a394c44b2bd5c9fb337f8
- SHA1 0f9b99fd338a975b971148382d11ae0b9e9393df
- SHA512 d9253b9fd965c81e26c9ad2ba5205c4306cdfb0161d4dc733030cf72fd81c409115b1d04350296fb57e76bbea28e89f1c752b452dbb3c6a54e0c5b91a7d2fc5f
- SSDEEP 12288:nSvO2x9mONvKRwLSFtsOkx2LIa+ya5FA+EuZ9oawhtyyb2:SvO2xJKRw2kOkx2LFRvhuZ98y
- TLSH T1CF257B21F641C036C4A74176C6BA4BAFB978BD21532555CBA3C43A5A2F732D2AE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory