General
- Target 2026-07-30_05ffc01e54f097bc03f87acca13a4448_coinminer_elex_glassworm_kwampirs_mafia
- Size 1024KB
- Sample260730-ejvpsscn9v
- SHA256 312e881afe44f5a42ac2ed4f74ef21bec35eb519ea0759e33b58c79e4d30f4c7
- MD5 05ffc01e54f097bc03f87acca13a4448
- SHA1 c5e0f26e737df307bda69dcd27e4ca9c91fb2738
- SHA512 68ba3bc46ff5d7b2b04a9876416e8404eec6f991519b0c32c1258b39f9a1d66a328c2b3340db010e2621e0ade7adc03ed0080ce04e4ed9bc823975d68ca9868f
- SSDEEP 24576:SjHPOSOkx2LFshuZ98Es8k3OH3C0rQ6+y:STGkQyhuTtS0rQi
- TLSH T16D25AF31E242C03AD5A70172C6BE0BAF95787D25472951C7A3D43D6A2FB22D2AE3570F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-30_05ffc01e54f097bc03f87acca13a4448_coinminer_elex_glassworm_kwampirs_mafia.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_05ffc01e54f097bc03f87acca13a4448_coinminer_elex_glassworm_kwampirs_mafia
- Size 1024KB
- SHA256 312e881afe44f5a42ac2ed4f74ef21bec35eb519ea0759e33b58c79e4d30f4c7
- MD5 05ffc01e54f097bc03f87acca13a4448
- SHA1 c5e0f26e737df307bda69dcd27e4ca9c91fb2738
- SHA512 68ba3bc46ff5d7b2b04a9876416e8404eec6f991519b0c32c1258b39f9a1d66a328c2b3340db010e2621e0ade7adc03ed0080ce04e4ed9bc823975d68ca9868f
- SSDEEP 24576:SjHPOSOkx2LFshuZ98Es8k3OH3C0rQ6+y:STGkQyhuTtS0rQi
- TLSH T16D25AF31E242C03AD5A70172C6BE0BAF95787D25472951C7A3D43D6A2FB22D2AE3570F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory