General
- Target 2026-07-22_1c3eee935330b365f3fd121a43ce464d_coinminer_elex_glassworm_krakencryptor_revil
- Size 8.3MB
- Sample260723-ced55szaqb
- SHA256 0a4d9e70824d0338c091ff331fe197be92569ce241867d7a1d261e5fd4b55a61
- MD5 1c3eee935330b365f3fd121a43ce464d
- SHA1 c9ba53a926959159bb311b7e0bb932d7f322a0e5
- SHA512 5de3a89ce71aed0efa6f51434a54216625a50f1a3c724c29fbddf3c3f1c573d6ff1a792f9a727d9c64312665783a0a37b8f4b5548ca803bfce8a4d8cdda9fc12
- SSDEEP 98304:1xBboBZTAEVzZIZ/YOSZmFZL/Xy/AHM076rbcebULKdMIh9JIPWtLELSL:1xB81V5UlMXrSw4I
- TLSH T1CE96AE13719051F9C416C1749B0787279A72B8893F35B9EF11D89AA03FA6FE12B3CB58
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-22_1c3eee935330b365f3fd121a43ce464d_coinminer_elex_glassworm_krakencryptor_revil.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-22_1c3eee935330b365f3fd121a43ce464d_coinminer_elex_glassworm_krakencryptor_revil.exe
Resource
win11ltsc2024-20260709-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-22_1c3eee935330b365f3fd121a43ce464d_coinminer_elex_glassworm_krakencryptor_revil
- Size 8.3MB
- SHA256 0a4d9e70824d0338c091ff331fe197be92569ce241867d7a1d261e5fd4b55a61
- MD5 1c3eee935330b365f3fd121a43ce464d
- SHA1 c9ba53a926959159bb311b7e0bb932d7f322a0e5
- SHA512 5de3a89ce71aed0efa6f51434a54216625a50f1a3c724c29fbddf3c3f1c573d6ff1a792f9a727d9c64312665783a0a37b8f4b5548ca803bfce8a4d8cdda9fc12
- SSDEEP 98304:1xBboBZTAEVzZIZ/YOSZmFZL/Xy/AHM076rbcebULKdMIh9JIPWtLELSL:1xB81V5UlMXrSw4I
- TLSH T1CE96AE13719051F9C416C1749B0787279A72B8893F35B9EF11D89AA03FA6FE12B3CB58
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables manipulated with Fody
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Checks whether UAC is enabled