General

  • Target

    GlassWire 2.3.413 Elite (Patched) malware only, nothing more.rar

  • Size

    66.7MB

  • MD5

    7b1c4a4399fd01c1c3d61408bce0ab75

  • SHA1

    c28d528181405fb185f1699e1570e614c04d918d

  • SHA256

    e36d7842ab6946489b3a8ad84cbd83d536d01f3db803b3ef17970b6fe892654a

  • SHA512

    c33bb7024948a67bfc4530b45d8d19199be0d82405e8c6d5a93e400b97340fbed40906c2ab70e86d7f89b7cd674060621974bd0484e561ca8803e57dff628fd9

  • SSDEEP

    1572864:82ZPmm6OC3le5xVNpVjsT/o7Sg79NZULRFrd4yVXOS7:823k3leHVRO/Rg7FkRFCy9Oa

Score
7/10

Malware Config

Signatures

  • Themida packer 9 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 3 IoCs

Files

  • GlassWire 2.3.413 Elite (Patched) malware only, nothing more.rar
    .rar

    Password: 123

  • GlassWire 2.3.413 Elite (Patched)/Activator (PW mobilism).zip
    .zip
  • GlassWire 2.3.413 Elite (Patched)/GlassWireSetup.exe
    .exe windows:5 windows x86 arch:x86

    Password: 123

    bcaa45e5d90477da44dabbbb71003fc9


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/GWDrvIns.cmd
    .cmd .vbs
  • $PLUGINSDIR/GWInstSt.exe
    .exe windows:6 windows x86 arch:x86

    Password: 123

    86d31f90ae193b9744f033d4695df916


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/StartMenu.dll
    .dll windows:4 windows x86 arch:x86

    Password: 123

    17fb6a8708b9c0bb2d5d8687870eb415


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    Password: 123

    8c8a576201f68de1a3f26fc723b9f30f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/eventlog.man
    .xml
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    Password: 123

    ddbd50fe6279559edf7d1f1d89b42c2c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    Password: 123

    46f8b6973f33717335c0f6d8087de67b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsihelper.dll
    .dll windows:6 windows x86 arch:x86

    Password: 123


    Code Sign

    Headers

    Exports

    Sections

  • $PLUGINSDIR/vc_redist.x86.exe
    .exe windows:5 windows x86 arch:x86

    1a5cdbf711fee14b077e599d13fddab2


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/windows.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • GWCtlSrv.exe
    .exe windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • GWEventLog.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • GWIdlMon.exe
    .exe windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • GWUnlock.exe
    .exe windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • GWUpgradeMonitor.exe
    .exe windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • GlassWire.exe
    .exe windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • Qt5Core.dll
    .dll windows:6 windows x86 arch:x86

    e06ad9ab29deac7c3b89c207a5a430e5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Qt5Gui.dll
    .dll windows:6 windows x86 arch:x86

    d028dea99212600c21918fcb691cb1b3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Qt5OpenGL.dll
    .dll windows:6 windows x86 arch:x86

    8550d84658273fd156e9ceabce697e0d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Qt5Svg.dll
    .dll windows:6 windows x86 arch:x86

    1401207c5942c2ffe1d333b42aa2f364


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Qt5Widgets.dll
    .dll windows:6 windows x86 arch:x86

    7b5c577d5e8aefa7b67519e2da1c90d5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Qt5WinExtras.dll
    .dll windows:6 windows x86 arch:x86

    8855ded2cc02de19566ccaaf0f7424be


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • copyrights/ASIO-LICENSE_1_0.txt
  • copyrights/CURL-COPYING.txt
  • copyrights/GEOIP-LICENSE.txt
  • copyrights/LZ4-LICENSE.txt
  • copyrights/OPENSSL-LICENSE.txt
  • copyrights/PROTOBYUF-LICENSE.txt
  • copyrights/QT-LICENSE.GPL3-EXCEPT.txt
  • copyrights/QT-LICENSE.txt
  • copyrights/RAPIDJSON-LICENSE.txt
  • copyrights/RAPIDXML-LICENSE.txt
  • copyrights/RECOG-COPYING.txt
  • copyrights/RLOTTIE-COPYING.MIT.txt
  • copyrights/SQLITE-COPYING.txt
  • copyrights/ZLIB-LICENSE.txt
  • driver/x64/gwdrv.cat
  • driver/x64/gwdrv.inf
  • driver/x64/gwdrv.sys
    .sys windows:6 windows x64 arch:x64

    f5dcd03cf0a08bfffee94eee61f2b56e


    Code Sign

    Headers

    Imports

    Sections

  • driver/x86/gwdrv.cat
  • driver/x86/gwdrv.inf
  • driver/x86/gwdrv.sys
    .sys windows:6 windows x86 arch:x86

    bc0fcd1e1a98457542ab10b8485f843f


    Code Sign

    Headers

    Imports

    Sections

  • iconengines/qsvgicon.dll
    .dll windows:6 windows x86 arch:x86

    9e108c6d538f4ecdf5c2f671e59ca5cd


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • imageformats/qico.dll
    .dll windows:6 windows x86 arch:x86

    53ad58237fca15c88c16c13eda178993


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • lang/de_de.qm
  • lang/en_gb.qm
  • lang/en_us.qm
  • lang/es_es.qm
  • lang/fr_fr.qm
  • lang/it_it.qm
  • lang/ja_jp.qm
  • lang/ko_kr.qm
  • lang/pl_pl.qm
  • lang/pt_br.qm
  • lang/ru_ru.qm
  • lang/tr_tr.qm
  • lang/zh_cn.qm
  • lang/zh_tw.qm
  • platforms/qwindows.dll
    .dll windows:6 windows x86 arch:x86

    a791ec203f95a29c3570e1da99783878


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • plugins/windows.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections