General
- Target 2025-12-18_5c480b9b6ee16832d25b54cc1c83f25d_coinminer_elex_glassworm_maze_stealc
- Size 2.0MB
- Sample251218-lsv59askes
- SHA256 472eb658a4702eab3c579ddf1cafa16cb9e8594e352934af1ce4730cfd174281
- MD5 5c480b9b6ee16832d25b54cc1c83f25d
- SHA1 8f597d19c8e3ed1a47c701609c00094b8d8c4e34
- SHA512 9f79ed5f500eaf72be7e8181a3bad25874274b0d4ddf4ae4313eda90fad7ae19854e4b8383d593681e88a56a01ffc5e01d2791453a9d6645fca5be956e1c2e9f
- SSDEEP 49152:1FKiiycOoSr6blxHbAjOLNct3oY/DavQ/qpyr0kncvK9dlGZAPRL+I:iiiycOoSr6blxHYuNctXbavQ/qpyr0ky
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
2025-12-18_5c480b9b6ee16832d25b54cc1c83f25d_coinminer_elex_glassworm_maze_stealc.exe
Resource
win10v2004-20251223-en
7 signatures
150 seconds
Malware Config
Extracted
Family
-
ffdroider
C2
-
http://186.2.171.3
Targets
-
- Target 2025-12-18_5c480b9b6ee16832d25b54cc1c83f25d_coinminer_elex_glassworm_maze_stealc
- Size 2.0MB
- SHA256 472eb658a4702eab3c579ddf1cafa16cb9e8594e352934af1ce4730cfd174281
- MD5 5c480b9b6ee16832d25b54cc1c83f25d
- SHA1 8f597d19c8e3ed1a47c701609c00094b8d8c4e34
- SHA512 9f79ed5f500eaf72be7e8181a3bad25874274b0d4ddf4ae4313eda90fad7ae19854e4b8383d593681e88a56a01ffc5e01d2791453a9d6645fca5be956e1c2e9f
- SSDEEP 49152:1FKiiycOoSr6blxHbAjOLNct3oY/DavQ/qpyr0kncvK9dlGZAPRL+I:iiiycOoSr6blxHYuNctXbavQ/qpyr0ky
- MD5 SHA1 SHA512 SSDEEP
-
FFDroider payload
-
Ffdroider family
-
Checks whether UAC is enabled