General
- Target 2025-11-27_04a332024b0fe874794eb55e0e4588e2_coinminer_elex_glassworm_poet-rat_rex_snatch_zxxz
- Size 6.9MB
- Sample251127-px776agq2s
- SHA256 bb609aa769d20bd00a8aaed95e47315dbf652c71678c7030e216f41a2aad0c57
- MD5 04a332024b0fe874794eb55e0e4588e2
- SHA1 f3bf95484240c26d44829d130a882d38723c3523
- SHA512 3f8f4d0a3e078fd9eb023703a1db1892fab7db8ff98ef4073eb48793508b5c5ec9e33edb128a07026881836091acc0fcd3400a4a696428d0750b492d3237205e
- SSDEEP 49152:y7v92mic7iMnbPvRUAm+ugRkqjR7Q8TOc5KubExvCsNGEgveIXB4ISqNT/IeswFK:y7UmP7i+Rf0es5uaqNTAcSE8bIX
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
2025-11-27_04a332024b0fe874794eb55e0e4588e2_coinminer_elex_glassworm_poet-rat_rex_snatch_zxxz.exe
Resource
win10v2004-20251016-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2025-11-27_04a332024b0fe874794eb55e0e4588e2_coinminer_elex_glassworm_poet-rat_rex_snatch_zxxz.exe
Resource
win11-20251015-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
stealthworker
Version
-
3.13
C2
-
http://194.26.29.184:8888
Targets
-
- Target 2025-11-27_04a332024b0fe874794eb55e0e4588e2_coinminer_elex_glassworm_poet-rat_rex_snatch_zxxz
- Size 6.9MB
- SHA256 bb609aa769d20bd00a8aaed95e47315dbf652c71678c7030e216f41a2aad0c57
- MD5 04a332024b0fe874794eb55e0e4588e2
- SHA1 f3bf95484240c26d44829d130a882d38723c3523
- SHA512 3f8f4d0a3e078fd9eb023703a1db1892fab7db8ff98ef4073eb48793508b5c5ec9e33edb128a07026881836091acc0fcd3400a4a696428d0750b492d3237205e
- SSDEEP 49152:y7v92mic7iMnbPvRUAm+ugRkqjR7Q8TOc5KubExvCsNGEgveIXB4ISqNT/IeswFK:y7UmP7i+Rf0es5uaqNTAcSE8bIX
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Stealthworker family