General
- Target 2026-08-27_e074746aaa247a48bf6b806163561710_coinminer_elex_glassworm_kwampirs_mafia
- Size 1024KB
- Sample260827-hkcr6ayvhs
- SHA256 8a179e6d82959c6e8b21c0345a8c6fcdd63ca4057d2f31c606e94f4408f3a17b
- MD5 e074746aaa247a48bf6b806163561710
- SHA1 5803969768e3259601cc1192e60b114e57edf1cd
- SHA512 62730cf96c428d4a1e1701eff44f744692d90754a96ef3c53782e1043fc07a5eaa909b885dcf3f632eaab455021e366fe5a71d1cf6ba9c6c1c9d14267895bb60
- SSDEEP 24576:ijHPOSOkx2LFshuZ98Es8k3OH3C0rQ6+y:iTGkQyhuTtS0rQi
- TLSH T1EF25AF31E242C03AD5A70172C6BE0BAF95787D25472951C7A3D43D6A2FB22D2AE3570F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-27_e074746aaa247a48bf6b806163561710_coinminer_elex_glassworm_kwampirs_mafia.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-27_e074746aaa247a48bf6b806163561710_coinminer_elex_glassworm_kwampirs_mafia.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-27_e074746aaa247a48bf6b806163561710_coinminer_elex_glassworm_kwampirs_mafia
- Size 1024KB
- SHA256 8a179e6d82959c6e8b21c0345a8c6fcdd63ca4057d2f31c606e94f4408f3a17b
- MD5 e074746aaa247a48bf6b806163561710
- SHA1 5803969768e3259601cc1192e60b114e57edf1cd
- SHA512 62730cf96c428d4a1e1701eff44f744692d90754a96ef3c53782e1043fc07a5eaa909b885dcf3f632eaab455021e366fe5a71d1cf6ba9c6c1c9d14267895bb60
- SSDEEP 24576:ijHPOSOkx2LFshuZ98Es8k3OH3C0rQ6+y:iTGkQyhuTtS0rQi
- TLSH T1EF25AF31E242C03AD5A70172C6BE0BAF95787D25472951C7A3D43D6A2FB22D2AE3570F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory