General
- Target 2026-07-18_bb3d7d4f48ade22d2d81dd4554ef8e3a_coinminer_elex_glassworm_kwampirs_mafia
- Size 1024KB
- Sample260718-hacdmset4v
- SHA256 98ab5373551c1691ecbe5e6416f75c9dcd1047e6d9c34d7325f5104c922d52b1
- MD5 bb3d7d4f48ade22d2d81dd4554ef8e3a
- SHA1 a7ba01d81f479012d4ed30bcbee8c8ba243eb990
- SHA512 2d4d098cbe145868e662e2b551a666e91218381ea812d591709ac1d961126e1631f9b81b924a0cae6d23b7f0f5823420fd8726b36c048ee150d86ae26242a80f
- SSDEEP 24576:ijHPOSOkx2LFshuZ98Es8k3OH3C0rQ6+y:iTGkQyhuTtS0rQi
- TLSH T12325AF31E242C03AD5A70172C6BE0BAF95787D25472951C7A3D43D6A2FB22D2AE3570F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-18_bb3d7d4f48ade22d2d81dd4554ef8e3a_coinminer_elex_glassworm_kwampirs_mafia.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-18_bb3d7d4f48ade22d2d81dd4554ef8e3a_coinminer_elex_glassworm_kwampirs_mafia
- Size 1024KB
- SHA256 98ab5373551c1691ecbe5e6416f75c9dcd1047e6d9c34d7325f5104c922d52b1
- MD5 bb3d7d4f48ade22d2d81dd4554ef8e3a
- SHA1 a7ba01d81f479012d4ed30bcbee8c8ba243eb990
- SHA512 2d4d098cbe145868e662e2b551a666e91218381ea812d591709ac1d961126e1631f9b81b924a0cae6d23b7f0f5823420fd8726b36c048ee150d86ae26242a80f
- SSDEEP 24576:ijHPOSOkx2LFshuZ98Es8k3OH3C0rQ6+y:iTGkQyhuTtS0rQi
- TLSH T12325AF31E242C03AD5A70172C6BE0BAF95787D25472951C7A3D43D6A2FB22D2AE3570F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory