General
- Target 2026-08-14_3efb014a6991ce1fda141916bf95c099_coinminer_elex_glassworm_kwampirs_mafia
- Size 1024KB
- Sample260814-mk3qss1emc
- SHA256 cb2ef13c0de4aafff99adc8ecc368827743b3f88829ce6c46600116dc4f64636
- MD5 3efb014a6991ce1fda141916bf95c099
- SHA1 d6f271551581d3e8eba25edb3485dca06033a9a8
- SHA512 ad2c371a8a2a7248028dba4d6e26386d0c66af797ba27c3db98b05a4efd1b110d9dda028d85e3d752968a14c941aea3fa5bcb0532f92c2ec2d703ef280a24db0
- SSDEEP 24576:gjHPOSOkx2LFshuZ98Es8k3OH3C0rQ6+y:gTGkQyhuTtS0rQi
- TLSH T16A25AF31E242C03AD5A70172C6BE0BAF95787D25472951C7A3D43D6A2FB22D2AE3570F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-14_3efb014a6991ce1fda141916bf95c099_coinminer_elex_glassworm_kwampirs_mafia.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-14_3efb014a6991ce1fda141916bf95c099_coinminer_elex_glassworm_kwampirs_mafia
- Size 1024KB
- SHA256 cb2ef13c0de4aafff99adc8ecc368827743b3f88829ce6c46600116dc4f64636
- MD5 3efb014a6991ce1fda141916bf95c099
- SHA1 d6f271551581d3e8eba25edb3485dca06033a9a8
- SHA512 ad2c371a8a2a7248028dba4d6e26386d0c66af797ba27c3db98b05a4efd1b110d9dda028d85e3d752968a14c941aea3fa5bcb0532f92c2ec2d703ef280a24db0
- SSDEEP 24576:gjHPOSOkx2LFshuZ98Es8k3OH3C0rQ6+y:gTGkQyhuTtS0rQi
- TLSH T16A25AF31E242C03AD5A70172C6BE0BAF95787D25472951C7A3D43D6A2FB22D2AE3570F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory