2026-07-10_ed61fc16b0d1a1317d4ec4ac03582cea_conti_glassworm

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-10_ed61fc16b0d1a1317d4ec4ac03582cea_conti_glassworm
Size 129KB
Sample260710-l3ldsshs7j
SHA256 382e1aabaa838cfb895085669251349f049c8bb8cc7e2a162b7b97bc1904a7c3
MD5 ed61fc16b0d1a1317d4ec4ac03582cea
SHA1 79cffa3809acae84ea3e5e2eda9437ec755018d4
SHA512 8b9116a4ae6d027a9383572bfa7e341945bfd501737ea5d4ddf2314602da804dbb1b4ed466602df60cb1f584fd1214ce368f0c909174836d834cd30a8a2cf220
SSDEEP 3072:X8YLRJND2n5/AEgq6wXwKbZYrUJP5L58LY18J:XLHHq6wXwKbZYgJP5L58a8J
TLSH
T113D3B4F177A64CCAD94792BC52C6D6613B3CFED04663970B012075212F27EC26FEA25A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-10_ed61fc16b0d1a1317d4ec4ac03582cea_conti_glassworm

File Explorer

2026-07-10_ed61fc16b0d1a1317d4ec4ac03582cea_conti_glassworm

.exe 129KB

2026-07-10_ed61fc16b0d1a1317d4ec4ac03582cea_conti_glassworm

IMPHASH af3f29bf11337bda1493a5d01224d4ec
SHA256 382e1aabaa838cfb895085669251349f049c8bb8cc7e2a162b7b97bc1904a7c3
MD5 ed61fc16b0d1a1317d4ec4ac03582cea
SHA1 79cffa3809acae84ea3e5e2eda9437ec755018d4
SHA512 8b9116a4ae6d027a9383572bfa7e341945bfd501737ea5d4ddf2314602da804dbb1b4ed466602df60cb1f584fd1214ce368f0c909174836d834cd30a8a2cf220
SSDEEP 3072:X8YLRJND2n5/AEgq6wXwKbZYrUJP5L58LY18J:XLHHq6wXwKbZYgJP5L58a8J
TLSH
T113D3B4F177A64CCAD94792BC52C6D6613B3CFED04663970B012075212F27EC26FEA25A
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4389

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

kernel32

CloseHandle CreateProcessA CreateRemoteThread CreateThread CreateToolhelp32Snapshot DeleteCriticalSection EnterCriticalSection GetCurrentProcess GetCurrentProcessId GetCurrentThread GetLastError GetModuleHandleA GetProcAddress InitializeCriticalSection IsDBCSLeadByteEx IsDebuggerPresent IsWow64Process LeaveCriticalSection LoadLibraryA MultiByteToWideChar OpenProcess OpenThread Process32First Process32Next QueueUserAPC ResumeThread SetUnhandledExceptionFilter Sleep TerminateProcess Thread32First Thread32Next TlsGetValue VirtualAlloc VirtualAllocEx VirtualFree VirtualFreeEx VirtualProtect VirtualProtectEx VirtualQuery WaitForSingleObject WideCharToMultiByte WriteProcessMemory __C_specific_handler

msvcrt

___lc_codepage_func ___mb_cur_max_func __getmainargs __initenv __iob_func __set_app_type __setusermatherr _amsg_exit _cexit _commode _errno _fmode _initterm _lock free memcpy memset _onexit _strtoi64 _time64 _unlock _setjmp abort calloc exit fclose fopen fprintf fputc fwrite getchar isalnum localeconv malloc raise realloc setlocale signal strcmp strerror strlen strncmp strncpy vfprintf wcslen

user32

GetForegroundWindow GetWindowThreadProcessId

libcurl-d

curl_easy_cleanup curl_easy_init curl_easy_perform curl_easy_setopt curl_easy_strerror

Name

.text

Size

47KB

Virtual Size

47KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

464B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

11KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

96B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

512B

Virtual Size

204B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-10_ed61fc16b0d1a1317d4ec4ac03582cea_conti_glassworm

kernel32

msvcrt

user32

libcurl-d

generic