General
- Target 2026-07-12_a3f89795e3061ffb4c11c90b7778948e_coinminer_elex_glassworm_kwampirs_mafia
- Size 1024KB
- Sample260712-n985jsbt6t
- SHA256 830ef23ede8b7475565ba116c8585b241fe657fc4de078121f225d7b874c00ac
- MD5 a3f89795e3061ffb4c11c90b7778948e
- SHA1 9e8f67356c257b8687bba8728dea7d1dfd5c0180
- SHA512 16ebea5aadce77ebb7d068e9186c546863a703b846523f430c9ef248240f00fc139dc5ed34acf5def5a020538179131962bed788a7d2c28d06ed4ee62710b13e
- SSDEEP 24576:tjHPOSOkx2LFshuZ98Es8k3OH3C0rQ6+y:tTGkQyhuTtS0rQi
- TLSH T12F25AF31E242C03AD5A70172C6BE0BAF95787D25472951C7A3D43D6A2FB22D2AE3570F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-12_a3f89795e3061ffb4c11c90b7778948e_coinminer_elex_glassworm_kwampirs_mafia.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-12_a3f89795e3061ffb4c11c90b7778948e_coinminer_elex_glassworm_kwampirs_mafia.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-12_a3f89795e3061ffb4c11c90b7778948e_coinminer_elex_glassworm_kwampirs_mafia
- Size 1024KB
- SHA256 830ef23ede8b7475565ba116c8585b241fe657fc4de078121f225d7b874c00ac
- MD5 a3f89795e3061ffb4c11c90b7778948e
- SHA1 9e8f67356c257b8687bba8728dea7d1dfd5c0180
- SHA512 16ebea5aadce77ebb7d068e9186c546863a703b846523f430c9ef248240f00fc139dc5ed34acf5def5a020538179131962bed788a7d2c28d06ed4ee62710b13e
- SSDEEP 24576:tjHPOSOkx2LFshuZ98Es8k3OH3C0rQ6+y:tTGkQyhuTtS0rQi
- TLSH T12F25AF31E242C03AD5A70172C6BE0BAF95787D25472951C7A3D43D6A2FB22D2AE3570F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory