General
- Target 2026-07-31_9b7dff8b9e676f379f99dfbfdba823a9_coinminer_elex_glassworm_kwampirs_mafia
- Size 1024KB
- Sample260731-3g3jmaad65
- SHA256 d5e7b24ad71fd69e1fa934d1c80209714fd864355ac420c3f1cbe06b9af21c01
- MD5 9b7dff8b9e676f379f99dfbfdba823a9
- SHA1 42ac2e9da2dfa99af1aa076e8e3085f4dbac9e54
- SHA512 5e370371a802b65b59f58d46ef5346cb90e03ee524b6f1dbf8b6ff7ee250577dcfc547bc0c9bf4719b15dee50262c6ad7dbc5a3f4086aafd635fe7c52fb18010
- SSDEEP 24576:7jHPOSOkx2LFshuZ98Es8k3OH3C0rQ6+y:7TGkQyhuTtS0rQi
- TLSH T12725AF31E242C03AD5A70172C6BE0BAF95787D25472951C7A3D43D6A2FB22D2AE3570F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-31_9b7dff8b9e676f379f99dfbfdba823a9_coinminer_elex_glassworm_kwampirs_mafia.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_9b7dff8b9e676f379f99dfbfdba823a9_coinminer_elex_glassworm_kwampirs_mafia
- Size 1024KB
- SHA256 d5e7b24ad71fd69e1fa934d1c80209714fd864355ac420c3f1cbe06b9af21c01
- MD5 9b7dff8b9e676f379f99dfbfdba823a9
- SHA1 42ac2e9da2dfa99af1aa076e8e3085f4dbac9e54
- SHA512 5e370371a802b65b59f58d46ef5346cb90e03ee524b6f1dbf8b6ff7ee250577dcfc547bc0c9bf4719b15dee50262c6ad7dbc5a3f4086aafd635fe7c52fb18010
- SSDEEP 24576:7jHPOSOkx2LFshuZ98Es8k3OH3C0rQ6+y:7TGkQyhuTtS0rQi
- TLSH T12725AF31E242C03AD5A70172C6BE0BAF95787D25472951C7A3D43D6A2FB22D2AE3570F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory