General
- Target 2026-06-26_0f537aea2344d9c0118acf5aace2003a_coinminer_elex_glassworm_smoke-loader_wapomi
- Size 13.1MB
- Sample260629-wtj5gsbv8v
- SHA256 49fc6bc7092c35eded5dea9149a16a966883666b8d520226bbcda0ed53f7c6dd
- MD5 0f537aea2344d9c0118acf5aace2003a
- SHA1 49790033b15b4c2baa7cff3f2d702c029f6cb1bd
- SHA512 40bb381605f8a3c55a2f9e781dea2dd8b9bb35d4b0c24df158d6897ea11c00f6d4d2c00787f6868c0646f7d7c09291479147fa1406a8e29c2bbf90e668ea8960
- SSDEEP 196608:51SWHWioj69LbP136bItc6TV4YYAYTaq:7SWH/BLbNf5VoGq
- TLSH T14ED64984E2F6C0F9C61A3974715B766FE93AB1856F0D56E3A7F12D08D9E02E01DF6280
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-26_0f537aea2344d9c0118acf5aace2003a_coinminer_elex_glassworm_smoke-loader_wapomi.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-26_0f537aea2344d9c0118acf5aace2003a_coinminer_elex_glassworm_smoke-loader_wapomi.exe
Resource
win11ltsc2024-20260629-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-26_0f537aea2344d9c0118acf5aace2003a_coinminer_elex_glassworm_smoke-loader_wapomi
- Size 13.1MB
- SHA256 49fc6bc7092c35eded5dea9149a16a966883666b8d520226bbcda0ed53f7c6dd
- MD5 0f537aea2344d9c0118acf5aace2003a
- SHA1 49790033b15b4c2baa7cff3f2d702c029f6cb1bd
- SHA512 40bb381605f8a3c55a2f9e781dea2dd8b9bb35d4b0c24df158d6897ea11c00f6d4d2c00787f6868c0646f7d7c09291479147fa1406a8e29c2bbf90e668ea8960
- SSDEEP 196608:51SWHWioj69LbP136bItc6TV4YYAYTaq:7SWH/BLbNf5VoGq
- TLSH T14ED64984E2F6C0F9C61A3974715B766FE93AB1856F0D56E3A7F12D08D9E02E01DF6280
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.