General
- Target 2026-08-02_10a80c66a08de58f17f5c2bf1d13dd39_coinminer_elex_glassworm_kwampirs_mafia
- Size 1024KB
- Sample260802-yblayawxft
- SHA256 c9af9107ede0d9e15efe1ff6ff16143a593471fd9803338acb9728401e5f29d4
- MD5 10a80c66a08de58f17f5c2bf1d13dd39
- SHA1 ba795a9b9a56e90e9b5bbaa7368574adc3fb8fdb
- SHA512 6d67803d34b02e82c4707eadd8bc357e18e43a43caed153c78f8d3a654b7c982dcc22ae34de3785b72833cfe1494f763914ae44bc580b381eb143e29eb209afc
- SSDEEP 24576:ujHPOSOkx2LFshuZ98Es8k3OH3C0rQ6+y:uTGkQyhuTtS0rQi
- TLSH T14A25AF31E242C03AD5A70172C6BE0BAF95787D25472951C7A3D43D6A2FB22D2AE3570F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-02_10a80c66a08de58f17f5c2bf1d13dd39_coinminer_elex_glassworm_kwampirs_mafia.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_10a80c66a08de58f17f5c2bf1d13dd39_coinminer_elex_glassworm_kwampirs_mafia
- Size 1024KB
- SHA256 c9af9107ede0d9e15efe1ff6ff16143a593471fd9803338acb9728401e5f29d4
- MD5 10a80c66a08de58f17f5c2bf1d13dd39
- SHA1 ba795a9b9a56e90e9b5bbaa7368574adc3fb8fdb
- SHA512 6d67803d34b02e82c4707eadd8bc357e18e43a43caed153c78f8d3a654b7c982dcc22ae34de3785b72833cfe1494f763914ae44bc580b381eb143e29eb209afc
- SSDEEP 24576:ujHPOSOkx2LFshuZ98Es8k3OH3C0rQ6+y:uTGkQyhuTtS0rQi
- TLSH T14A25AF31E242C03AD5A70172C6BE0BAF95787D25472951C7A3D43D6A2FB22D2AE3570F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory