General
- Target 2026-08-21_33b47695740295fbe343024b693165ed_coinminer_elex_glassworm_kwampirs_mafia
- Size 1024KB
- Sample260821-k7kgmaxapa
- SHA256 8a12ec3c5efa3cba948d0476733a815e347d27c9915cbd2c4e3211dcf25290e3
- MD5 33b47695740295fbe343024b693165ed
- SHA1 7859352bd02032c99969873820d2ec517efaa52d
- SHA512 f88a0937392645cc8f59e9f2665c40febd4900cf42d4a6dc35e51537a0817d14856ae1e12bda2d2f9c5e9d7ec58fa4c42f836b78f6f89ec4a650677d9bd2a85b
- SSDEEP 24576:KjHPOSOkx2LFshuZ98Es8k3OH3C0rQ6+y:KTGkQyhuTtS0rQi
- TLSH T19525AF31E242C03AD5A70172C6BE0BAF95787D25472951C7A3D43D6A2FB22D2AE3570F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-21_33b47695740295fbe343024b693165ed_coinminer_elex_glassworm_kwampirs_mafia.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-21_33b47695740295fbe343024b693165ed_coinminer_elex_glassworm_kwampirs_mafia.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_33b47695740295fbe343024b693165ed_coinminer_elex_glassworm_kwampirs_mafia
- Size 1024KB
- SHA256 8a12ec3c5efa3cba948d0476733a815e347d27c9915cbd2c4e3211dcf25290e3
- MD5 33b47695740295fbe343024b693165ed
- SHA1 7859352bd02032c99969873820d2ec517efaa52d
- SHA512 f88a0937392645cc8f59e9f2665c40febd4900cf42d4a6dc35e51537a0817d14856ae1e12bda2d2f9c5e9d7ec58fa4c42f836b78f6f89ec4a650677d9bd2a85b
- SSDEEP 24576:KjHPOSOkx2LFshuZ98Es8k3OH3C0rQ6+y:KTGkQyhuTtS0rQi
- TLSH T19525AF31E242C03AD5A70172C6BE0BAF95787D25472951C7A3D43D6A2FB22D2AE3570F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory