General
- Target 2026-07-01_53e963b054e4849fb273eb4ef5db5009_coinminer_elex_floxif_glassworm_hijackloader_mespinoza_revil
- Size 2.2MB
- Sample260701-ltdycsaz2p
- SHA256 12de1d201f226fb5d9a56853af68b2cbb09da38efc23029ce05d8f1873536ba4
- MD5 53e963b054e4849fb273eb4ef5db5009
- SHA1 04dd42543213237974de5bf87d3d511e30b8516d
- SHA512 e2e136c0433b5f994429dcb3848660e35f0e00a44ac7f58e95db3ae25f92e6b22a40b275ff327672dfac968ed66dc3d1a54bab6ad6fca1e31c11f7c209179921
- SSDEEP 49152:L4aiDzx8vsZIyRrrhncW1IBkPtb0zKX04urUPjKGw:Ox8vsXIcbFX0N
- TLSH T126B5BF12FB8293B2E8C3017922AB577F4D3A76288729C5C3CBA51D699D705C1A73F358
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-01_53e963b054e4849fb273eb4ef5db5009_coinminer_elex_floxif_glassworm_hijackloader_mespinoza_revil.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-01_53e963b054e4849fb273eb4ef5db5009_coinminer_elex_floxif_glassworm_hijackloader_mespinoza_revil.exe
Resource
win11ltsc2024-20260629-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_53e963b054e4849fb273eb4ef5db5009_coinminer_elex_floxif_glassworm_hijackloader_mespinoza_revil
- Size 2.2MB
- SHA256 12de1d201f226fb5d9a56853af68b2cbb09da38efc23029ce05d8f1873536ba4
- MD5 53e963b054e4849fb273eb4ef5db5009
- SHA1 04dd42543213237974de5bf87d3d511e30b8516d
- SHA512 e2e136c0433b5f994429dcb3848660e35f0e00a44ac7f58e95db3ae25f92e6b22a40b275ff327672dfac968ed66dc3d1a54bab6ad6fca1e31c11f7c209179921
- SSDEEP 49152:L4aiDzx8vsZIyRrrhncW1IBkPtb0zKX04urUPjKGw:Ox8vsXIcbFX0N
- TLSH T126B5BF12FB8293B2E8C3017922AB577F4D3A76288729C5C3CBA51D699D705C1A73F358
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.