Analysis
- max time kernel
149s - max time network
150s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
22/05/2026, 03:06
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-05-22_7d0283da396984edfdcd472076947431_glassworm.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-22_7d0283da396984edfdcd472076947431_glassworm.exe
Resource
win11-20260513-en
2 signatures
150 seconds
General
- Target 2026-05-22_7d0283da396984edfdcd472076947431_glassworm.exe
- Size 566KB
- Sample260522-dl6dmsf141
- SHA256 1dfc045d4e20ba412526372b2a4dd0e704aa65a443a71ce60ceeafd0fe8fbc9e
- MD5 7d0283da396984edfdcd472076947431
- SHA1 51049045d6be2c0f09da3f67e421d1c5cfb91906
- SHA512 17046f480ac3145a289c9e7b951514ecf3c713549de3bf06b6ca66ce39d764aa3ea990d0b7f3577fe0c9f2bc79e9d440ee23b449157f66ec325c48b2af286548
- SSDEEP 12288:XgzdrmiUQGaLEgjeLdR2DDnsiJu4NHfZ0clVaaeZP3dbycSZRliEM9jnGZgiCcVy:XqnP/jMdR2DDnsiJu4NHfZ0clVaaeZP9
- TLSH T15DC45A5467E88A04F2BF6F74A8B10156C7B3F847AD36E78E19C954DD1A72B81EC10B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Malware Config
Signatures
- Detects executables referencing virtualization MAC addresses 1 IoCs
resource yara_rule behavioral2/memory/2668-0-0x000001ADD7D00000-0x000001ADD7D92000-memory.dmp INDICATOR_SUSPICIOUS_VM_Evasion_MACAddrComb - Detects ransomware indicator 1 IoCs
resource yara_rule behavioral2/memory/2668-0-0x000001ADD7D00000-0x000001ADD7D92000-memory.dmp SUSP_RANSOMWARE_Indicator_Jul20