General
- Target 2026-07-10_75263c00b3e70c0c753ac388174d6485_coinminer_elex_glassworm_kwampirs_mafia
- Size 1024KB
- Sample260710-k5sp8agv9q
- SHA256 2c8a35280e90245d600a0b9e55aaecfb399602910bc8d375eb37ad909e064ff8
- MD5 75263c00b3e70c0c753ac388174d6485
- SHA1 06da18b568b06077c6bb3903a867b3c27c227938
- SHA512 4adb60cc601b559b0bf026c6af84cd67f0ee965b035e11f5bdf9c8d211263b4acac21e2481167e2c43c30ae1ea2832ea2cf02f669af3d3a496580548e1080771
- SSDEEP 24576:/jHPOSOkx2LFshuZ98Es8k3OH3C0rQ6+y:/TGkQyhuTtS0rQi
- TLSH T18925AF31E242C03AD5A70172C6BE0BAF95787D25472951C7A3D43D6A2FB22D2AE3570F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-10_75263c00b3e70c0c753ac388174d6485_coinminer_elex_glassworm_kwampirs_mafia.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-10_75263c00b3e70c0c753ac388174d6485_coinminer_elex_glassworm_kwampirs_mafia
- Size 1024KB
- SHA256 2c8a35280e90245d600a0b9e55aaecfb399602910bc8d375eb37ad909e064ff8
- MD5 75263c00b3e70c0c753ac388174d6485
- SHA1 06da18b568b06077c6bb3903a867b3c27c227938
- SHA512 4adb60cc601b559b0bf026c6af84cd67f0ee965b035e11f5bdf9c8d211263b4acac21e2481167e2c43c30ae1ea2832ea2cf02f669af3d3a496580548e1080771
- SSDEEP 24576:/jHPOSOkx2LFshuZ98Es8k3OH3C0rQ6+y:/TGkQyhuTtS0rQi
- TLSH T18925AF31E242C03AD5A70172C6BE0BAF95787D25472951C7A3D43D6A2FB22D2AE3570F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory