General
- Target 2026-08-09_a57e9c16416bea27c33b2148cf1fa521_coinminer_elex_glassworm_kwampirs_mafia
- Size 1024KB
- Sample260809-a2ts1a1vh1
- SHA256 95e85125300f7dac22c1d0bbcb1f90b693d34367a3bf326e7fb467a5eed31b0e
- MD5 a57e9c16416bea27c33b2148cf1fa521
- SHA1 9e3d018bac22a2beeacf013634ffc6212f2d89d2
- SHA512 8721ad1d4dc35b85452c2e71a5c7ae0fc69e6271f942710baa56434e27a7bb6dee70421fdb40b82a099b1984b9eb7c8b620b49562ff20b839a6e2a275517f7b1
- SSDEEP 24576:gjHPOSOkx2LFshuZ98Es8k3OH3C0rQ6+y:gTGkQyhuTtS0rQi
- TLSH T13125AF31E242C03AD5A70172C6BE0BAF95787D25472951C7A3D43D6A2FB22D2AE3570F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-09_a57e9c16416bea27c33b2148cf1fa521_coinminer_elex_glassworm_kwampirs_mafia.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_a57e9c16416bea27c33b2148cf1fa521_coinminer_elex_glassworm_kwampirs_mafia.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_a57e9c16416bea27c33b2148cf1fa521_coinminer_elex_glassworm_kwampirs_mafia
- Size 1024KB
- SHA256 95e85125300f7dac22c1d0bbcb1f90b693d34367a3bf326e7fb467a5eed31b0e
- MD5 a57e9c16416bea27c33b2148cf1fa521
- SHA1 9e3d018bac22a2beeacf013634ffc6212f2d89d2
- SHA512 8721ad1d4dc35b85452c2e71a5c7ae0fc69e6271f942710baa56434e27a7bb6dee70421fdb40b82a099b1984b9eb7c8b620b49562ff20b839a6e2a275517f7b1
- SSDEEP 24576:gjHPOSOkx2LFshuZ98Es8k3OH3C0rQ6+y:gTGkQyhuTtS0rQi
- TLSH T13125AF31E242C03AD5A70172C6BE0BAF95787D25472951C7A3D43D6A2FB22D2AE3570F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory