Analysis
- max time kernel
149s - max time network
150s - platform
windows10-2004_x64 - resource
win10v2004-20260130-en - resource tags
arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
11/05/2026, 03:39
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-05-11_5c30b782f047fcc300c914bac802a24e_elex_glassworm_mespinoza_remcos.exe
Resource
win10v2004-20260130-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-11_5c30b782f047fcc300c914bac802a24e_elex_glassworm_mespinoza_remcos.exe
Resource
win11-20250610-en
1 signatures
150 seconds
General
- Target 2026-05-11_5c30b782f047fcc300c914bac802a24e_elex_glassworm_mespinoza_remcos.exe
- Size 10.0MB
- Sample260511-d7m47aes4k
- SHA256 b4cc4850e26220e673c54c0a99957977dd4442759dec8ef0bce5100e0ebf3200
- MD5 5c30b782f047fcc300c914bac802a24e
- SHA1 97482efb4df2cf56be7ad5fc621752ea296f5c15
- SHA512 b25f56f121a3f2bccc5bce8f657a1dbe729c2ff4a96f4aac02363741ccd46c9546f620314e8bef5fe22a3ff647e5d7d644c35dd37312e4ff0ef8b63706e3b6b0
- SSDEEP 196608:Aki2IY7LyGB8zGwj3X8Lqw61Jsxh1JsxZfJ4:ZyyE8Lqwq
- TLSH T195B68C217349CE25DDE105B45E3CEEAF101DFF610B2251C762983E6D29B09DB1B3AE1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Malware Config
Signatures
- Custom signatureDetects executables packed with VMProtect. 1 IoCs
resource yara_rule behavioral1/memory/5228-0-0x0000000000400000-0x0000000000E22000-memory.dmp INDICATOR_EXE_Packed_VMProtect