General
- Target 2026-07-30_f24b4055c8a439ede6d3bd91aa8cdc0f_coinminer_elex_glassworm_poet-rat_swisyn_wannacry_zxxz
- Size 18.0MB
- Sample260730-hfvr6sel7w
- SHA256 5c0c1b0298ea0ab800007697e2d718678b527a1c1f9df1a6aeb9dff823f04d9a
- MD5 f24b4055c8a439ede6d3bd91aa8cdc0f
- SHA1 9ea71a24abfd65e0d800b8b160d2832847dfda52
- SHA512 ecec3774dcf78e90569992965f6a5cf92374f1f9340f03caca5c4e3f9a6d09d000b8446e64ae2e09c9ad6efd4605df6f7a1cf5494c16a4d857e141a52be0d805
- SSDEEP 196608:SZVW9zAjcJEe2gJOwr4i4sZaCSm7FhCjfMJi:4VWSgAwr3mrR
- TLSH T14A175CA1E9DB40F5DA03187044ABA23F17316E059B29CFC7E6007F6AF877AD21A37549
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-30_f24b4055c8a439ede6d3bd91aa8cdc0f_coinminer_elex_glassworm_poet-rat_swisyn_wannacry_zxxz.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_f24b4055c8a439ede6d3bd91aa8cdc0f_coinminer_elex_glassworm_poet-rat_swisyn_wannacry_zxxz.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_f24b4055c8a439ede6d3bd91aa8cdc0f_coinminer_elex_glassworm_poet-rat_swisyn_wannacry_zxxz
- Size 18.0MB
- SHA256 5c0c1b0298ea0ab800007697e2d718678b527a1c1f9df1a6aeb9dff823f04d9a
- MD5 f24b4055c8a439ede6d3bd91aa8cdc0f
- SHA1 9ea71a24abfd65e0d800b8b160d2832847dfda52
- SHA512 ecec3774dcf78e90569992965f6a5cf92374f1f9340f03caca5c4e3f9a6d09d000b8446e64ae2e09c9ad6efd4605df6f7a1cf5494c16a4d857e141a52be0d805
- SSDEEP 196608:SZVW9zAjcJEe2gJOwr4i4sZaCSm7FhCjfMJi:4VWSgAwr3mrR
- TLSH T14A175CA1E9DB40F5DA03187044ABA23F17316E059B29CFC7E6007F6AF877AD21A37549
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory