General
- Target 2026-08-29_fcfd793077c94135309db6732743f714_coinminer_elex_glassworm_kwampirs_mafia
- Size 1024KB
- Sample260830-2vmvnabj3s
- SHA256 11ea3cc1859d0de0d3433c1d5718c04f6c5ae8c461dfa4aca21b1b4619d6ac6f
- MD5 fcfd793077c94135309db6732743f714
- SHA1 f10fdd81b7f6ee7b2b9b6e296f4c12253fabad82
- SHA512 4a7d9c3ed0e354a41cafd2bc5950be53ede8baebb045b83c1ad90068172ea6a4a5f58831331770318e27e67a44897ffa82986a93e61e6ab55219fe39868d35b3
- SSDEEP 24576:vjHPOSOkx2LFshuZ98Es8k3OH3C0rQ6+y:vTGkQyhuTtS0rQi
- TLSH T15D25AF31E242C03AD5A70172C6BE0BAF95787D25472951C7A3D43D6A2FB22D2AE3570F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-29_fcfd793077c94135309db6732743f714_coinminer_elex_glassworm_kwampirs_mafia.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-29_fcfd793077c94135309db6732743f714_coinminer_elex_glassworm_kwampirs_mafia
- Size 1024KB
- SHA256 11ea3cc1859d0de0d3433c1d5718c04f6c5ae8c461dfa4aca21b1b4619d6ac6f
- MD5 fcfd793077c94135309db6732743f714
- SHA1 f10fdd81b7f6ee7b2b9b6e296f4c12253fabad82
- SHA512 4a7d9c3ed0e354a41cafd2bc5950be53ede8baebb045b83c1ad90068172ea6a4a5f58831331770318e27e67a44897ffa82986a93e61e6ab55219fe39868d35b3
- SSDEEP 24576:vjHPOSOkx2LFshuZ98Es8k3OH3C0rQ6+y:vTGkQyhuTtS0rQi
- TLSH T15D25AF31E242C03AD5A70172C6BE0BAF95787D25472951C7A3D43D6A2FB22D2AE3570F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory