General
- Target 2026-07-06_067b92776319bb115ebe535db5945028_coinminer_elex_glassworm_graphican_hijackloader_mespinoza_revil
- Size 1.8MB
- Sample260707-gdhjdsay41
- SHA256 c052b1fa8c79bc6811fd7c1efe3773f9a8d01deb9b347a9ee19071626d21c761
- MD5 067b92776319bb115ebe535db5945028
- SHA1 6ca5040baacbea2db6fac10f689b2bc3b0b96657
- SHA512 421446a8d7c56f26bf8b3ef38b4c2b8fe42ee779d3ff8e075d713c811da7738617bde7b5e23e7c599e34d58fae83cf5b46cb8a1a20d21272e5bd5adb1393e315
- SSDEEP 49152:SrqGDwTwZyjKPODVnw8PyZUpfonviG3g0OjuN:Sr1xoNDZlPyZUunKG31
- TLSH T1F395CF23BB4225B1E4C74D3452B3EFBE9532BA254B11D4F39BD12C9A48312E1673B35A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_067b92776319bb115ebe535db5945028_coinminer_elex_glassworm_graphican_hijackloader_mespinoza_revil.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_067b92776319bb115ebe535db5945028_coinminer_elex_glassworm_graphican_hijackloader_mespinoza_revil.exe
Resource
win11ltsc2024-20260706-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_067b92776319bb115ebe535db5945028_coinminer_elex_glassworm_graphican_hijackloader_mespinoza_revil
- Size 1.8MB
- SHA256 c052b1fa8c79bc6811fd7c1efe3773f9a8d01deb9b347a9ee19071626d21c761
- MD5 067b92776319bb115ebe535db5945028
- SHA1 6ca5040baacbea2db6fac10f689b2bc3b0b96657
- SHA512 421446a8d7c56f26bf8b3ef38b4c2b8fe42ee779d3ff8e075d713c811da7738617bde7b5e23e7c599e34d58fae83cf5b46cb8a1a20d21272e5bd5adb1393e315
- SSDEEP 49152:SrqGDwTwZyjKPODVnw8PyZUpfonviG3g0OjuN:Sr1xoNDZlPyZUunKG31
- TLSH T1F395CF23BB4225B1E4C74D3452B3EFBE9532BA254B11D4F39BD12C9A48312E1673B35A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.