General
- Target 2026-07-10_657ec2f24530b40a05c4de41c9d241a6_coinminer_elex_glassworm_kwampirs_mafia
- Size 1024KB
- Sample260710-k6awsshx4x
- SHA256 9326299fe15eed5e8072ac2b4614e12b85ea3be10a937b151ecf7a3440f0a1b6
- MD5 657ec2f24530b40a05c4de41c9d241a6
- SHA1 c99e012cb0a54308a82172e28f2ce9bb970f7441
- SHA512 eaa63a6838f356b58499cf5ef0a1f32df3051f0c3b6cf14d889fc9d57d27183d3042ce009bea855aecf83044e5aa1fba93be4399e6bd37d5b92a01f240cdf6c4
- SSDEEP 24576:DjHPOSOkx2LFshuZ98Es8k3OH3C0rQ6+y:DTGkQyhuTtS0rQi
- TLSH T18325AF31E242C03AD5A70172C6BE0BAF95787D25472951C7A3D43D6A2FB22D2AE3570F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-10_657ec2f24530b40a05c4de41c9d241a6_coinminer_elex_glassworm_kwampirs_mafia.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-10_657ec2f24530b40a05c4de41c9d241a6_coinminer_elex_glassworm_kwampirs_mafia
- Size 1024KB
- SHA256 9326299fe15eed5e8072ac2b4614e12b85ea3be10a937b151ecf7a3440f0a1b6
- MD5 657ec2f24530b40a05c4de41c9d241a6
- SHA1 c99e012cb0a54308a82172e28f2ce9bb970f7441
- SHA512 eaa63a6838f356b58499cf5ef0a1f32df3051f0c3b6cf14d889fc9d57d27183d3042ce009bea855aecf83044e5aa1fba93be4399e6bd37d5b92a01f240cdf6c4
- SSDEEP 24576:DjHPOSOkx2LFshuZ98Es8k3OH3C0rQ6+y:DTGkQyhuTtS0rQi
- TLSH T18325AF31E242C03AD5A70172C6BE0BAF95787D25472951C7A3D43D6A2FB22D2AE3570F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory