General
- Target 2026-08-15_f04e2283472d621f7cf8bfb863e241a2_coinminer_elex_glassworm_kwampirs_mafia
- Size 1024KB
- Sample260815-mfmh1sfb65
- SHA256 a9e57b89df972110e58d38d1b3cbaebc9a9fb1dc8b22fc2996f7d6e3e618dd69
- MD5 f04e2283472d621f7cf8bfb863e241a2
- SHA1 32a60af7d0dc6ff6e44e5396ae186c5d70a77b3c
- SHA512 074b57a402224f607e577684371916420c18bc34306f978ff3452ff77adc723f268506e4eab5fe7214b9d56bdc504edbbcc2f2da95c02c1026dc00df3317637d
- SSDEEP 24576:SjHPOSOkx2LFshuZ98Es8k3OH3C0rQ6+y:STGkQyhuTtS0rQi
- TLSH T12725AF31E242C03AD5A70172C6BE0BAF95787D25472951C7A3D43D6A2FB22D2AE3570F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-15_f04e2283472d621f7cf8bfb863e241a2_coinminer_elex_glassworm_kwampirs_mafia.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-15_f04e2283472d621f7cf8bfb863e241a2_coinminer_elex_glassworm_kwampirs_mafia
- Size 1024KB
- SHA256 a9e57b89df972110e58d38d1b3cbaebc9a9fb1dc8b22fc2996f7d6e3e618dd69
- MD5 f04e2283472d621f7cf8bfb863e241a2
- SHA1 32a60af7d0dc6ff6e44e5396ae186c5d70a77b3c
- SHA512 074b57a402224f607e577684371916420c18bc34306f978ff3452ff77adc723f268506e4eab5fe7214b9d56bdc504edbbcc2f2da95c02c1026dc00df3317637d
- SSDEEP 24576:SjHPOSOkx2LFshuZ98Es8k3OH3C0rQ6+y:STGkQyhuTtS0rQi
- TLSH T12725AF31E242C03AD5A70172C6BE0BAF95787D25472951C7A3D43D6A2FB22D2AE3570F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory