General
- Target 2026-05-07_1695c90adf0f9dbc9c6f339ddeb4743d_cobalt-strike_conti_glassworm_qilin
- Size 984KB
- Sample260507-llj5eaev6p
- SHA256 facbc84074ef47d0280726890296d3c442e1af1dd59e7d2db4c867900c6ca454
- MD5 1695c90adf0f9dbc9c6f339ddeb4743d
- SHA1 212ed28805460e5df9113d8d6fe37048236b65d6
- SHA512 24fbe96766b6ce60d6d3f78658785868dfd448944f6bfcb8a253ad08b10f7b2fdfcb8bd91d310f9fbdd9a4f0815d56651374f511cd07b7800ccf50c96b86386f
- SSDEEP 12288:exrH4Jmx+GHlupaiBfUuQYM3ErJ4O3jHtlzXRVTU23EhO6o0LQbiiiStj5p8VZFw:eJ5+GFuUWM3SJ4YbtFhVTU2376AKmqFw
- TLSH T1E825DF16E29350BDC427C170979FA2B3B5B1F8454235AE6F9B98CF353F60E61522EB02
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-05-07_1695c90adf0f9dbc9c6f339ddeb4743d_cobalt-strike_conti_glassworm_qilin.exe
Resource
win10v2004-20260130-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-07_1695c90adf0f9dbc9c6f339ddeb4743d_cobalt-strike_conti_glassworm_qilin
- Size 984KB
- SHA256 facbc84074ef47d0280726890296d3c442e1af1dd59e7d2db4c867900c6ca454
- MD5 1695c90adf0f9dbc9c6f339ddeb4743d
- SHA1 212ed28805460e5df9113d8d6fe37048236b65d6
- SHA512 24fbe96766b6ce60d6d3f78658785868dfd448944f6bfcb8a253ad08b10f7b2fdfcb8bd91d310f9fbdd9a4f0815d56651374f511cd07b7800ccf50c96b86386f
- SSDEEP 12288:exrH4Jmx+GHlupaiBfUuQYM3ErJ4O3jHtlzXRVTU23EhO6o0LQbiiiStj5p8VZFw:eJ5+GFuUWM3SJ4YbtFhVTU2376AKmqFw
- TLSH T1E825DF16E29350BDC427C170979FA2B3B5B1F8454235AE6F9B98CF353F60E61522EB02
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10- Custom signature
Detects Windows exceutables bypassing UAC using CMSTP COM interfaces. MITRE (T1218.003)