General
- Target 2026-06-26_1e21011f4d2d7a8aecb66951fc7aa2e0_coinminer_elex_glassworm_hive_ngrbot_poet-rat_rex_snatch_zxxz
- Size 41.6MB
- Sample260629-wbfpcacw6n
- SHA256 0695d31006802c7682be17a3b12114b6f9845b374e3a6bf2c54e0fccb12481d8
- MD5 1e21011f4d2d7a8aecb66951fc7aa2e0
- SHA1 e520964669cae644e8f83aab752530dd22467e30
- SHA512 0f4bc7958f0687cfa8059cdbcdaeb05ce6e939bc07973846cf6f6cbb791cb14d73cd9a7785276f7b3d3a241af8cd4be6ef7f8ceef64731d32c01bec5295812ad
- SSDEEP 786432:9k4tLslRKp1bluF8x9RI06iNIA2BR3ep3f04Dv:9kcLyRqF
- TLSH T1CEA74A61E99BE0B1EA024431C06BD5FF2B311D068729CA87F68C7E2BFB729D1057751A
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-06-26_1e21011f4d2d7a8aecb66951fc7aa2e0_coinminer_elex_glassworm_hive_ngrbot_poet-rat_rex_snatch_zxxz.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-26_1e21011f4d2d7a8aecb66951fc7aa2e0_coinminer_elex_glassworm_hive_ngrbot_poet-rat_rex_snatch_zxxz
- Size 41.6MB
- SHA256 0695d31006802c7682be17a3b12114b6f9845b374e3a6bf2c54e0fccb12481d8
- MD5 1e21011f4d2d7a8aecb66951fc7aa2e0
- SHA1 e520964669cae644e8f83aab752530dd22467e30
- SHA512 0f4bc7958f0687cfa8059cdbcdaeb05ce6e939bc07973846cf6f6cbb791cb14d73cd9a7785276f7b3d3a241af8cd4be6ef7f8ceef64731d32c01bec5295812ad
- SSDEEP 786432:9k4tLslRKp1bluF8x9RI06iNIA2BR3ep3f04Dv:9kcLyRqF
- TLSH T1CEA74A61E99BE0B1EA024431C06BD5FF2B311D068729CA87F68C7E2BFB729D1057751A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables referencing many IR and analysis tools
-
UPX dump on OEP (original entry point)