General
- Target 2026-10-26_59d8f714296a55d994c605c6a9acb665_amadey_coinminer_elex_glassworm_kwampirs_remcos_smoke-loader_stop
- Size 1.2MB
- Sample261027-t8fphaew4z
- SHA256 94e56bb062f767e878817a089174f1e07b2e97107bb83048626b6195ea32e8a7
Score
10/10
Malware Config
Targets
-
- Target 2026-10-26_59d8f714296a55d994c605c6a9acb665_amadey_coinminer_elex_glassworm_kwampirs_remcos_smoke-loader_stop
- Size 1.2MB
- SHA256 94e56bb062f767e878817a089174f1e07b2e97107bb83048626b6195ea32e8a7
Score9/10-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory
-
UPX packed file
Detects executables packed with UPX/modified UPX open source packer.