General
- Target 2026-08-10_50214a42257c459f0a3913ab782462fd_coinminer_elex_glassworm_kwampirs_mafia
- Size 1024KB
- Sample260810-y86cdaad67
- SHA256 730eac0fc98af87a78c3431c7c88cf054c85f694978cf933d6eb54f779a7b290
- MD5 50214a42257c459f0a3913ab782462fd
- SHA1 fee1522976e94ace3e8180bf7e845e7acdff3d4f
- SHA512 6b2cd64ca2e8ddcff00facdd2248e6389bf1cf46ba63dd40333de0629f44a84e5287935cd26c02fb0ff9af9e56299173012592c2454ea686c509e38da6ff2528
- SSDEEP 24576:JjHPOSOkx2LFshuZ98Es8k3OH3C0rQ6+y:JTGkQyhuTtS0rQi
- TLSH T13425AF31E242C03AD5A70172C6BE0BAF95787D25472951C7A3D43D6A2FB22D2AE3570F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-10_50214a42257c459f0a3913ab782462fd_coinminer_elex_glassworm_kwampirs_mafia.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_50214a42257c459f0a3913ab782462fd_coinminer_elex_glassworm_kwampirs_mafia.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_50214a42257c459f0a3913ab782462fd_coinminer_elex_glassworm_kwampirs_mafia
- Size 1024KB
- SHA256 730eac0fc98af87a78c3431c7c88cf054c85f694978cf933d6eb54f779a7b290
- MD5 50214a42257c459f0a3913ab782462fd
- SHA1 fee1522976e94ace3e8180bf7e845e7acdff3d4f
- SHA512 6b2cd64ca2e8ddcff00facdd2248e6389bf1cf46ba63dd40333de0629f44a84e5287935cd26c02fb0ff9af9e56299173012592c2454ea686c509e38da6ff2528
- SSDEEP 24576:JjHPOSOkx2LFshuZ98Es8k3OH3C0rQ6+y:JTGkQyhuTtS0rQi
- TLSH T13425AF31E242C03AD5A70172C6BE0BAF95787D25472951C7A3D43D6A2FB22D2AE3570F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory