General
- Target 2026-07-23_c0f4113380e207dc3a1c7b612e953f4c_coinminer_elex_glassworm_hijackloader_swisyn_wannacry
- Size 13.2MB
- Sample260723-s6tynsfl4s
- SHA256 dab02aa72ffdd20e8ff9140a043c0d81945e814e5a757e631b1674425b0ec645
- MD5 c0f4113380e207dc3a1c7b612e953f4c
- SHA1 ab12d5e3ae2e5ce68178fa0a20b872c748c35eb5
- SHA512 129fcef11d1d44ad46a1ec765f3be801e4940360268ce119e03312e170aeae096157ad23059a81d6dd80674898d8a3b746e91641990d9f24d529bac3a1b43726
- SSDEEP 98304:9yLyo6zpS5BlxFllQCd5Mjq21d/PknjyugvNnClWx583wq69NqUXaKKM+4fUH6Dj:0LyxNGBlxFl0Pkn+ugvNP8gKy
- TLSH T195D63AC2E740405BD15511778A76168762B5A8ABF720BDF74234F972EE372E02DF8A23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-23_c0f4113380e207dc3a1c7b612e953f4c_coinminer_elex_glassworm_hijackloader_swisyn_wannacry.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-23_c0f4113380e207dc3a1c7b612e953f4c_coinminer_elex_glassworm_hijackloader_swisyn_wannacry.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-23_c0f4113380e207dc3a1c7b612e953f4c_coinminer_elex_glassworm_hijackloader_swisyn_wannacry
- Size 13.2MB
- SHA256 dab02aa72ffdd20e8ff9140a043c0d81945e814e5a757e631b1674425b0ec645
- MD5 c0f4113380e207dc3a1c7b612e953f4c
- SHA1 ab12d5e3ae2e5ce68178fa0a20b872c748c35eb5
- SHA512 129fcef11d1d44ad46a1ec765f3be801e4940360268ce119e03312e170aeae096157ad23059a81d6dd80674898d8a3b746e91641990d9f24d529bac3a1b43726
- SSDEEP 98304:9yLyo6zpS5BlxFllQCd5Mjq21d/PknjyugvNnClWx583wq69NqUXaKKM+4fUH6Dj:0LyxNGBlxFl0Pkn+ugvNP8gKy
- TLSH T195D63AC2E740405BD15511778A76168762B5A8ABF720BDF74234F972EE372E02DF8A23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory