General
- Target 2026-07-19_26008e7f128b417b601885e3a3f33a76_coinminer_elex_glassworm_kwampirs_mafia
- Size 1024KB
- Sample260719-ledztaa181
- SHA256 58a6f4093c8f76c2269ddf8200576c0f1e0a36dac459a72396b22028620e03fa
- MD5 26008e7f128b417b601885e3a3f33a76
- SHA1 9fb077c82e2e738a513efb5ea125e1fef6470881
- SHA512 ece9811bdf2fe326ddd52605238b7a3b835dc161344f009d1cf87c8d563ab3cd3c98679dc251db3fc9a0e54e19f1edc10806dd97e8d987a8db6e6713a9743d0a
- SSDEEP 24576:UjHPOSOkx2LFshuZ98Es8k3OH3C0rQ6+y:UTGkQyhuTtS0rQi
- TLSH T11C25AF31E242C03AD5A70172C6BE0BAF95787D25472951C7A3D43D6A2FB22D2AE3570F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-19_26008e7f128b417b601885e3a3f33a76_coinminer_elex_glassworm_kwampirs_mafia.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-19_26008e7f128b417b601885e3a3f33a76_coinminer_elex_glassworm_kwampirs_mafia
- Size 1024KB
- SHA256 58a6f4093c8f76c2269ddf8200576c0f1e0a36dac459a72396b22028620e03fa
- MD5 26008e7f128b417b601885e3a3f33a76
- SHA1 9fb077c82e2e738a513efb5ea125e1fef6470881
- SHA512 ece9811bdf2fe326ddd52605238b7a3b835dc161344f009d1cf87c8d563ab3cd3c98679dc251db3fc9a0e54e19f1edc10806dd97e8d987a8db6e6713a9743d0a
- SSDEEP 24576:UjHPOSOkx2LFshuZ98Es8k3OH3C0rQ6+y:UTGkQyhuTtS0rQi
- TLSH T11C25AF31E242C03AD5A70172C6BE0BAF95787D25472951C7A3D43D6A2FB22D2AE3570F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory