General
- Target 2026-07-01_edd2d38133b6825be88584e0e47763ae_elex_glassworm_kovter
- Size 450KB
- Sample260702-brbp4shs2r
- SHA256 6ab016d57c33546c25b5f2e1d0bbf5fa47f4c05099a62db8160ae39760d6a5fe
- MD5 edd2d38133b6825be88584e0e47763ae
- SHA1 6108e5d09b193c54ad2989c67ecae386e01b1e39
- SHA512 23b323c391ee4aea81626e72659eb9048164729f6eb2d24656eac7e3d8a33273f35cedd554ce215872d7e55505338ba0980dc2249597359c517cde4085e82ca1
- SSDEEP 12288:L1Rqo9769LrVYvxhmvrxIIO2Sgf56IILo:LTl4vVYZEvrxvO2SgR67o
- TLSH T1A6A45C3AF240E237C42658BC8D0FE3E56979F6342E359C57B6D11F4C98B16A36A1B243
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-01_edd2d38133b6825be88584e0e47763ae_elex_glassworm_kovter.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-01_edd2d38133b6825be88584e0e47763ae_elex_glassworm_kovter.exe
Resource
win11ltsc2024-20260629-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_edd2d38133b6825be88584e0e47763ae_elex_glassworm_kovter
- Size 450KB
- SHA256 6ab016d57c33546c25b5f2e1d0bbf5fa47f4c05099a62db8160ae39760d6a5fe
- MD5 edd2d38133b6825be88584e0e47763ae
- SHA1 6108e5d09b193c54ad2989c67ecae386e01b1e39
- SHA512 23b323c391ee4aea81626e72659eb9048164729f6eb2d24656eac7e3d8a33273f35cedd554ce215872d7e55505338ba0980dc2249597359c517cde4085e82ca1
- SSDEEP 12288:L1Rqo9769LrVYvxhmvrxIIO2Sgf56IILo:LTl4vVYZEvrxvO2SgR67o
- TLSH T1A6A45C3AF240E237C42658BC8D0FE3E56979F6342E359C57B6D11F4C98B16A36A1B243
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.