General
- Target 2026-08-02_8e5551652ceebe6d82d48da4269599b4_coinminer_elex_glassworm_kwampirs_mafia
- Size 1024KB
- Sample260802-v988watzaz
- SHA256 6f9e5bbdba97f67a8c4347e60f734d9b50d737a2b9cd60170eda01a022bd4bd1
- MD5 8e5551652ceebe6d82d48da4269599b4
- SHA1 12bbe5ca574b76e890e04f1799c50cb54f87351c
- SHA512 aae3415e7bc9bc22b17bb65adee1dee60918e2ef2ea2453155952b09b82f19cb61dc8c760bde373f519b477f942350dc4f04a4249d0b33544dca5f7c62d619f4
- SSDEEP 24576:VjHPOSOkx2LFshuZ98Es8k3OH3C0rQ6+y:VTGkQyhuTtS0rQi
- TLSH T14B25AF31E242C03AD5A70172C6BE0BAF95787D25472951C7A3D43D6A2FB22D2AE3570F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-02_8e5551652ceebe6d82d48da4269599b4_coinminer_elex_glassworm_kwampirs_mafia.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_8e5551652ceebe6d82d48da4269599b4_coinminer_elex_glassworm_kwampirs_mafia
- Size 1024KB
- SHA256 6f9e5bbdba97f67a8c4347e60f734d9b50d737a2b9cd60170eda01a022bd4bd1
- MD5 8e5551652ceebe6d82d48da4269599b4
- SHA1 12bbe5ca574b76e890e04f1799c50cb54f87351c
- SHA512 aae3415e7bc9bc22b17bb65adee1dee60918e2ef2ea2453155952b09b82f19cb61dc8c760bde373f519b477f942350dc4f04a4249d0b33544dca5f7c62d619f4
- SSDEEP 24576:VjHPOSOkx2LFshuZ98Es8k3OH3C0rQ6+y:VTGkQyhuTtS0rQi
- TLSH T14B25AF31E242C03AD5A70172C6BE0BAF95787D25472951C7A3D43D6A2FB22D2AE3570F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory