General
- Target 2026-07-09_ce9e20d81ec6c3b0391294c18a3d3528_glassworm_mespinoza
- Size 11.6MB
- Sample260709-d891cac18y
- SHA256 030bb379b2bd976ffea0df36dfacf6edc7696d1f9f3177c7a66c4e0a56ab2d41
- MD5 ce9e20d81ec6c3b0391294c18a3d3528
- SHA1 0583450ccb47a54fd94f4a4e645064e994dddadb
- SHA512 1356bba0d525787523ea50b521525775bab0393b829ebca9df4c200f2d097d62330b6c9e78370c38d979dee0192ee90c39d70e7ab79e5debff36472f065d123d
- SSDEEP 98304:PBXMda1Qi316reEyfpS2G4uSPkerrn228hDXlHCOKcGPc:PBXMAM4fw7SseG28hD9C0
- TLSH T191C67C95F3B100E5E8BBC174C5169623EFB17C561838A75F07A16AE72F33A605E2E321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-09_ce9e20d81ec6c3b0391294c18a3d3528_glassworm_mespinoza.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-09_ce9e20d81ec6c3b0391294c18a3d3528_glassworm_mespinoza.exe
Resource
win11ltsc2024-20260706-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_ce9e20d81ec6c3b0391294c18a3d3528_glassworm_mespinoza
- Size 11.6MB
- SHA256 030bb379b2bd976ffea0df36dfacf6edc7696d1f9f3177c7a66c4e0a56ab2d41
- MD5 ce9e20d81ec6c3b0391294c18a3d3528
- SHA1 0583450ccb47a54fd94f4a4e645064e994dddadb
- SHA512 1356bba0d525787523ea50b521525775bab0393b829ebca9df4c200f2d097d62330b6c9e78370c38d979dee0192ee90c39d70e7ab79e5debff36472f065d123d
- SSDEEP 98304:PBXMda1Qi316reEyfpS2G4uSPkerrn228hDXlHCOKcGPc:PBXMAM4fw7SseG28hD9C0
- TLSH T191C67C95F3B100E5E8BBC174C5169623EFB17C561838A75F07A16AE72F33A605E2E321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.