General
- Target 2026-05-17_bc5ba14b3f1e01e58b9730e7a7d6c4bd_glassworm_mespinoza
- Size 7.9MB
- Sample260517-remvlsds2q
- SHA256 e942535afe37b645c068373495fd3c4806a585a2c63c1872066da3b94aae9eaa
- MD5 bc5ba14b3f1e01e58b9730e7a7d6c4bd
- SHA1 c9a6a165749bf7d7cd9cd1d6059ef7944d4690ce
- SHA512 7a2ac6c1a2f2927b1897d59cd001a56e53f72af794504aa0eb720a52bab911d40452c09b59c7e0fc3ad95a35cade615b9b390040fc0cfbd62de7149b65e97f33
- SSDEEP 49152:6HBRCNy+7/60jKfEWrFRwCt4e5pbhlxPkpJ/Wi/LfRCbTdgMDupepTIKLAwVgbKG:a7d34e79iIdWepshRw3D7nTsReRR9s
- TLSH T14286294677F455E5E1B7C2B489B696B1FAB2B8951C34E34F1061821F2F33AB09D2D322
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-17_bc5ba14b3f1e01e58b9730e7a7d6c4bd_glassworm_mespinoza.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-17_bc5ba14b3f1e01e58b9730e7a7d6c4bd_glassworm_mespinoza.exe
Resource
win11-20260513-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-17_bc5ba14b3f1e01e58b9730e7a7d6c4bd_glassworm_mespinoza
- Size 7.9MB
- SHA256 e942535afe37b645c068373495fd3c4806a585a2c63c1872066da3b94aae9eaa
- MD5 bc5ba14b3f1e01e58b9730e7a7d6c4bd
- SHA1 c9a6a165749bf7d7cd9cd1d6059ef7944d4690ce
- SHA512 7a2ac6c1a2f2927b1897d59cd001a56e53f72af794504aa0eb720a52bab911d40452c09b59c7e0fc3ad95a35cade615b9b390040fc0cfbd62de7149b65e97f33
- SSDEEP 49152:6HBRCNy+7/60jKfEWrFRwCt4e5pbhlxPkpJ/Wi/LfRCbTdgMDupepTIKLAwVgbKG:a7d34e79iIdWepshRw3D7nTsReRR9s
- TLSH T14286294677F455E5E1B7C2B489B696B1FAB2B8951C34E34F1061821F2F33AB09D2D322
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Checks system information in the registry
System information is often read in order to detect sandboxing environments.