2026-10-26_fbcd7f2e9b885fe2a56e1611cb382f58_amadey_coinminer_elex_glassworm_smoke-loader_stop

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-26_fbcd7f2e9b885fe2a56e1611cb382f58_amadey_coinminer_elex_glassworm_smoke-loader_stop
Size 7.9MB
Sample261027-bnebtszzex
SHA256 2674fd75c82c4cc3f30b5c892bd3ce2b938ff6d99e7e58806b428143cd50c72b
MD5 fbcd7f2e9b885fe2a56e1611cb382f58
SHA1 061092a8119fc6a7a3224c905eae546a8066f699
SHA512 daec71588a1bc27357d7fd4b48af221076218edfc1805166fbb7636332fbf7499ba12cda78c66ba8b1870b6c9e93d084db37deb6e6fab66212d9b7c5d90c43e2
SSDEEP 196608:qdNuABkEJj2KbF70kphZ/ntoz0faNLlXotxgO:0utEJj/70kphK0aZlXK
TLSH
T164862A21E643C039EAE215B681FF5BBF94185B18171920D3B3DC2E7B7B951E2B93214E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-26_fbcd7f2e9b885fe2a56e1611cb382f58_amadey_coinminer_elex_glassworm_smoke-loader_stop

File Explorer

2026-10-26_fbcd7f2e9b885fe2a56e1611cb382f58_amadey_coinminer_elex_glassworm_smoke-loader_stop

.exe 7.9MB

2026-10-26_fbcd7f2e9b885fe2a56e1611cb382f58_amadey_coinminer_elex_glassworm_smoke-loader_stop

SHA256 2674fd75c82c4cc3f30b5c892bd3ce2b938ff6d99e7e58806b428143cd50c72b
MD5 fbcd7f2e9b885fe2a56e1611cb382f58
SHA1 061092a8119fc6a7a3224c905eae546a8066f699
SHA512 daec71588a1bc27357d7fd4b48af221076218edfc1805166fbb7636332fbf7499ba12cda78c66ba8b1870b6c9e93d084db37deb6e6fab66212d9b7c5d90c43e2
SSDEEP 196608:qdNuABkEJj2KbF70kphZ/ntoz0faNLlXotxgO:0utEJj/70kphK0aZlXK
TLSH
T164862A21E643C039EAE215B681FF5BBF94185B18171920D3B3DC2E7B7B951E2B93214E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4347579

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

d:\Work\DevClient1.0_For_Release\Bin\Release\RF_Online.pdb

Name

.text

Size

6.5MB

Virtual Size

6.5MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.LINGO2

Size

50KB

Virtual Size

49KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

1.1MB

Virtual Size

1.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

242KB

Virtual Size

39.9MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rfk

Size

16KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rfm

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.kit

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tfa

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.tfpc

Size

1024B

Virtual Size

644B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

generic

count=54, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,

count=1, id=48, version=9044,

count=46, id=105, version=2067,

count=44, id=10, version=8966,

count=1, id=96, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,

count=10, id=126, version=50327,

count=62, id=125, productName=VS2005 build 50727, version=50727,

count=1, id=10, productName=VS98 (6.0) SP6 build 8804, version=9782,

count=1, id=28, version=9178,

count=8, id=123, productName=VS2005 build 50727, version=50727,

count=20, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,

count=58, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,

count=41, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,

count=472, id=1, productName=Unmarked objects,

count=690, id=109, productName=VS2005 build 50727, version=50727,

count=822, id=110, productName=VS2005 build 50727, version=50727,

count=1, id=124, productName=VS2005 build 50727, version=50727,

count=1, id=120, productName=VS2005 build 50727, version=50727,