General
- Target 2026-08-09_4baf01d38a0104952afa4e2242774a97_coinminer_elex_glassworm_helldown_hijackloader_remcos
- Size 1.9MB
- Sample260809-vd18dssbpf
- SHA256 4c6cf4ae323eed2c48e4bd0a208fb675d1c1df387c7e9d1d2cb774d3806c8328
- MD5 4baf01d38a0104952afa4e2242774a97
- SHA1 054007505b3b1228901412336713bffa89bb04af
- SHA512 ba2f44e421904a6177567a5845d064eacee027a055b14a9d67bea37d4edd5d5638de2f96e90928eb7b220b4f4f8ba4eaba47c7139773012b1b51131282d54749
- SSDEEP 49152:i7lPxEZDJNUx/zVSOwuDQmWN81fxXQPe6j:UCZVNUpVlt1fZe
- TLSH T194956B02B407C62AEB4282BA9B7CDD9A741C9510937910CBB7DE457F2B5D8DCCA33792
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_4baf01d38a0104952afa4e2242774a97_coinminer_elex_glassworm_helldown_hijackloader_remcos.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_4baf01d38a0104952afa4e2242774a97_coinminer_elex_glassworm_helldown_hijackloader_remcos
- Size 1.9MB
- SHA256 4c6cf4ae323eed2c48e4bd0a208fb675d1c1df387c7e9d1d2cb774d3806c8328
- MD5 4baf01d38a0104952afa4e2242774a97
- SHA1 054007505b3b1228901412336713bffa89bb04af
- SHA512 ba2f44e421904a6177567a5845d064eacee027a055b14a9d67bea37d4edd5d5638de2f96e90928eb7b220b4f4f8ba4eaba47c7139773012b1b51131282d54749
- SSDEEP 49152:i7lPxEZDJNUx/zVSOwuDQmWN81fxXQPe6j:UCZVNUpVlt1fZe
- TLSH T194956B02B407C62AEB4282BA9B7CDD9A741C9510937910CBB7DE457F2B5D8DCCA33792
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.