General
- Target 2026-10-28_9efb7dc4aacbb0558961f1d5eeaf6f09_amadey_coinminer_elex_glassworm_remcos_smoke-loader_stop
- Size 1.1MB
- Sample261029-2cy5zacf33
- SHA256 4673d1a2abbfca64e5ac2e12821850458c03d072fe82fe1b1c65c80f0e43f2e2
Score
10/10
Malware Config
Targets
-
- Target 2026-10-28_9efb7dc4aacbb0558961f1d5eeaf6f09_amadey_coinminer_elex_glassworm_remcos_smoke-loader_stop
- Size 1.1MB
- SHA256 4673d1a2abbfca64e5ac2e12821850458c03d072fe82fe1b1c65c80f0e43f2e2
Score9/10-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory
-
UPX packed file
Detects executables packed with UPX/modified UPX open source packer.