General
- Target 2026-08-10_29220f3c8421bbdc9432143f6c889a82_coinminer_elex_glassworm_kwampirs_mafia
- Size 1024KB
- Sample260810-kmze2sdr8s
- SHA256 2d8202ccc5003f4993137836a2954ea2696827a1e891d3ee278381e1d9e17d46
- MD5 29220f3c8421bbdc9432143f6c889a82
- SHA1 c4304c99b7e7af2aa32616b81f7808eee022ad19
- SHA512 a194da835d11499c9b5ef11cea934a4148ad8dbc9106df402a5460bed3ebbbe32032285100f5560f2df61e5d823a268318ca8ff34b6c845c0cbaa2b37d66c87f
- SSDEEP 24576:fjHPOSOkx2LFshuZ98Es8k3OH3C0rQ6+y:fTGkQyhuTtS0rQi
- TLSH T1C425AF31E242C03AD5A70172C6BE0BAF95787D25472951C7A3D43D6A2FB22D2AE3570F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-10_29220f3c8421bbdc9432143f6c889a82_coinminer_elex_glassworm_kwampirs_mafia.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_29220f3c8421bbdc9432143f6c889a82_coinminer_elex_glassworm_kwampirs_mafia
- Size 1024KB
- SHA256 2d8202ccc5003f4993137836a2954ea2696827a1e891d3ee278381e1d9e17d46
- MD5 29220f3c8421bbdc9432143f6c889a82
- SHA1 c4304c99b7e7af2aa32616b81f7808eee022ad19
- SHA512 a194da835d11499c9b5ef11cea934a4148ad8dbc9106df402a5460bed3ebbbe32032285100f5560f2df61e5d823a268318ca8ff34b6c845c0cbaa2b37d66c87f
- SSDEEP 24576:fjHPOSOkx2LFshuZ98Es8k3OH3C0rQ6+y:fTGkQyhuTtS0rQi
- TLSH T1C425AF31E242C03AD5A70172C6BE0BAF95787D25472951C7A3D43D6A2FB22D2AE3570F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory