Overview

overview

9

Static

static

3

2026-06-26...rm.exe

windows10-2004-x64

9

2026-06-26...rm.exe

windows11-ltsc_2024-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target
    2026-06-26_c7220b2076eee2fa9d707f78d6cb7a97_conti_glassworm
  • Size 209KB
  • Sample260629-plpxfae12p
  • SHA256 307793ecca20f44e3f99ee976e85f5b6ab738109bae44d2c0d19722171ea09e5
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10

Malware Config

Targets

    • Target
      2026-06-26_c7220b2076eee2fa9d707f78d6cb7a97_conti_glassworm
    • Size 209KB
    • SHA256 307793ecca20f44e3f99ee976e85f5b6ab738109bae44d2c0d19722171ea09e5
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    9/10

    • Detects executables containing URLs to raw contents of a Github gist

    • Contacts third-party web service commonly abused for C2

      Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks