2026-04-04_e1dcde0f60edc7a331c70be6825fc4f7_elex_glassworm_stop

Sharing

Copy URL Twitter E-mail

General

Target
2026-04-04_e1dcde0f60edc7a331c70be6825fc4f7_elex_glassworm_stop
Size 2.1MB
Sample260404-mreybaes3s
SHA256 6b05b5a22c8ccef52ad25a0d2956c727cfaf5095a886a390ed01e5c9ec4cbe05
MD5 e1dcde0f60edc7a331c70be6825fc4f7
SHA1 d2a180a98c78d3a99ab0bedf9713a78925bc14a0
SHA512 397b14a41cd4ea86a2b99f25c33347fc512be09a9c0b84ab8eb9d58f4abfc0fba72cd0bd3597e272507cf63db1542d85e2bab7f1fc15a647d9f34181e786d48f
SSDEEP 49152:Q0lrax49sKfUSM27mNWx9J7ZfCzOrUhz0Vb:pdXv76GJZfSA
TLSH
T19DA5ADA7E7418AD8EA8D41776B0A4580D22EF221A74F6351796C060DCF43BCB9F64E3D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-04-04_e1dcde0f60edc7a331c70be6825fc4f7_elex_glassworm_stop

File Explorer

2026-04-04_e1dcde0f60edc7a331c70be6825fc4f7_elex_glassworm_stop

.exe 2.1MB

2026-04-04_e1dcde0f60edc7a331c70be6825fc4f7_elex_glassworm_stop

IMPHASH 533c5409968cfac36437ac5835c4d83f
SHA256 6b05b5a22c8ccef52ad25a0d2956c727cfaf5095a886a390ed01e5c9ec4cbe05
MD5 e1dcde0f60edc7a331c70be6825fc4f7
SHA1 d2a180a98c78d3a99ab0bedf9713a78925bc14a0
SHA512 397b14a41cd4ea86a2b99f25c33347fc512be09a9c0b84ab8eb9d58f4abfc0fba72cd0bd3597e272507cf63db1542d85e2bab7f1fc15a647d9f34181e786d48f
SSDEEP 49152:Q0lrax49sKfUSM27mNWx9J7ZfCzOrUhz0Vb:pdXv76GJZfSA
TLSH
T19DA5ADA7E7418AD8EA8D41776B0A4580D22EF221A74F6351796C060DCF43BCB9F64E3D
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

70417

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetSystemDefaultLangID lstrcmpA lstrlenA GetSystemDefaultUILanguage LeaveCriticalSection GetACP lstrlenW SetLastError GetProcAddress IsValidCodePage GetPrivateProfileStringA GetModuleHandleA CreateFileA GetLocaleInfoW SetStdHandle WriteConsoleW GetConsoleOutputCP WriteConsoleA LoadLibraryA InterlockedIncrement InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection HeapAlloc GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException GetLastError HeapFree RtlUnwind LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW GetCPInfo VirtualFree VirtualAlloc HeapReAlloc HeapCreate GetModuleHandleW ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetConsoleCP GetConsoleMode FlushFileBuffers ReadFile SetFilePointer CloseHandle HeapSize GetOEMCP GetLocaleInfoA GetStringTypeA GetStringTypeW GetUserDefaultLCID EnumSystemLocalesA IsValidLocale InitializeCriticalSectionAndSpinCount

user32

GetMessageExtraInfo GetTopWindow IsZoomed GetParent GetForegroundWindow GetDesktopWindow IsWindow IsWow64Message GetDlgCtrlID GetShellWindow

Name

.text

Size

1.5MB

Virtual Size

1.5MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

19KB

Virtual Size

18KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

6KB

Virtual Size

2.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

16KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

20KB

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

URuyVPmc

Size

3KB

Virtual Size

2KB

Characteristics

Name

RvrGGULd

Size

2KB

Virtual Size

2KB

Characteristics

Name

aMvIBDYN

Size

1024B

Virtual Size

877B

Characteristics

Name

jwqBvnPh

Size

34KB

Virtual Size

33KB

Characteristics

Name

BPMDYrNU

Size

506KB

Virtual Size

505KB

Characteristics

Name

ohxwjLXP

Size

29KB

Virtual Size

29KB

Characteristics

Name

ZyXIylcN

Size

512B

Virtual Size

225B

Characteristics

Name

qQHQaEzM

Size

8KB

Virtual Size

8KB

Characteristics

Name

UNUFcjiP

Size

2KB

Virtual Size

1KB

Characteristics

Name

RnNQOsIc

Size

28KB

Virtual Size

27KB

Characteristics

Sharing

General

Malware Config

Signatures

File Explorer

2026-04-04_e1dcde0f60edc7a331c70be6825fc4f7_elex_glassworm_stop

kernel32

user32

generic