General
- Target 2026-07-12_7e58d737b68e32503997f07afefcaf58_coinminer_elex_glassworm_kwampirs_mafia
- Size 1024KB
- Sample260712-psltcshz3k
- SHA256 84db94a3a752fc76b7e8307369203d9fc3f63d0397ed07ea1deb41c4b5f8fe44
- MD5 7e58d737b68e32503997f07afefcaf58
- SHA1 ab93e8c12f0ae9d87e7d6e004951f3dea69c602d
- SHA512 8fbbd9f804a7664f67761479f26d2d11d0b44988ae1b4b21dc8e6b1e7f6e002a594238ec4c8973bf53a07ae0fc4a1eec0e2dfcd86e6a8109c6b8ce5f259ce902
- SSDEEP 24576:YjHPOSOkx2LFshuZ98Es8k3OH3C0rQ6+y:YTGkQyhuTtS0rQi
- TLSH T13E25AF31E242C03AD5A70172C6BE0BAF95787D25472951C7A3D43D6A2FB22D2AE3570F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-12_7e58d737b68e32503997f07afefcaf58_coinminer_elex_glassworm_kwampirs_mafia.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-12_7e58d737b68e32503997f07afefcaf58_coinminer_elex_glassworm_kwampirs_mafia
- Size 1024KB
- SHA256 84db94a3a752fc76b7e8307369203d9fc3f63d0397ed07ea1deb41c4b5f8fe44
- MD5 7e58d737b68e32503997f07afefcaf58
- SHA1 ab93e8c12f0ae9d87e7d6e004951f3dea69c602d
- SHA512 8fbbd9f804a7664f67761479f26d2d11d0b44988ae1b4b21dc8e6b1e7f6e002a594238ec4c8973bf53a07ae0fc4a1eec0e2dfcd86e6a8109c6b8ce5f259ce902
- SSDEEP 24576:YjHPOSOkx2LFshuZ98Es8k3OH3C0rQ6+y:YTGkQyhuTtS0rQi
- TLSH T13E25AF31E242C03AD5A70172C6BE0BAF95787D25472951C7A3D43D6A2FB22D2AE3570F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory