General
- Target 2026-06-25_de9ed99aa983b710f30ec42eafe88672_elex_glassworm_stop_swisyn
- Size 6.3MB
- Sample260629-x54hyaex2p
- SHA256 c4aa7f50882f8135ea71e820bdfef86147cf0380855db800af7e8c6ecb386bdb
- MD5 de9ed99aa983b710f30ec42eafe88672
- SHA1 63346e78059ffb67bbe9651c531b8b260ef7e4c4
- SHA512 4408b86fb7fb45f94ba40145001d631d0e9446db36738e2ce671b3f04b9153179849766e3c9075236ec9cec6be9a3eb21e59c75d261a9b8033f4d47fbb38824d
- SSDEEP 196608:aEX/rWo/je/I7joVpS/xjqmojD390brVcpp:RX/rWojYkxjiD/p
- TLSH T1EB66BF317FC540BAC5623571944BD33EA5F69E642B345AC3A2443E3A7E307C26D3A29E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-25_de9ed99aa983b710f30ec42eafe88672_elex_glassworm_stop_swisyn.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-25_de9ed99aa983b710f30ec42eafe88672_elex_glassworm_stop_swisyn.exe
Resource
win11ltsc2024-20260629-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-25_de9ed99aa983b710f30ec42eafe88672_elex_glassworm_stop_swisyn
- Size 6.3MB
- SHA256 c4aa7f50882f8135ea71e820bdfef86147cf0380855db800af7e8c6ecb386bdb
- MD5 de9ed99aa983b710f30ec42eafe88672
- SHA1 63346e78059ffb67bbe9651c531b8b260ef7e4c4
- SHA512 4408b86fb7fb45f94ba40145001d631d0e9446db36738e2ce671b3f04b9153179849766e3c9075236ec9cec6be9a3eb21e59c75d261a9b8033f4d47fbb38824d
- SSDEEP 196608:aEX/rWo/je/I7joVpS/xjqmojD390brVcpp:RX/rWojYkxjiD/p
- TLSH T1EB66BF317FC540BAC5623571944BD33EA5F69E642B345AC3A2443E3A7E307C26D3A29E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory