2026-07-11_a080e8acc7e31b17f69480359dd4cbdb_conti_glassworm

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-11_a080e8acc7e31b17f69480359dd4cbdb_conti_glassworm
Size 184KB
Sample260711-s41y7sfy21
SHA256 a70ef7142ff4827be76c5775b628dfd1dc1718186f8a56a65c08aefe7cf42b08
MD5 a080e8acc7e31b17f69480359dd4cbdb
SHA1 e0e9c8f82674209fedf2f5f124b3bde6f0964dbd
SHA512 6e87c750c5d18d206a42b4a5f55d1b460e51e457838f9647764eec74871e091b0bee9bcf29f13e0e7b0f53765bd5d34e64b792bd40f5d0cf2f120757bfad703a
SSDEEP 3072:OGS/UnVlwSkwxpqmOcmIwYH5bl83+KU296TRn:OONtH5bl83+r296Tl
TLSH
T13504194AF25310FCC997C17586935B71E572FC290324ABEF2798E7351F31A819E3AA12
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-11_a080e8acc7e31b17f69480359dd4cbdb_conti_glassworm

File Explorer

2026-07-11_a080e8acc7e31b17f69480359dd4cbdb_conti_glassworm

.exe 184KB

2026-07-11_a080e8acc7e31b17f69480359dd4cbdb_conti_glassworm

IMPHASH ce329319fc972d69ec98eaf7db13c616
SHA256 a70ef7142ff4827be76c5775b628dfd1dc1718186f8a56a65c08aefe7cf42b08
MD5 a080e8acc7e31b17f69480359dd4cbdb
SHA1 e0e9c8f82674209fedf2f5f124b3bde6f0964dbd
SHA512 6e87c750c5d18d206a42b4a5f55d1b460e51e457838f9647764eec74871e091b0bee9bcf29f13e0e7b0f53765bd5d34e64b792bd40f5d0cf2f120757bfad703a
SSDEEP 3072:OGS/UnVlwSkwxpqmOcmIwYH5bl83+KU296TRn:OONtH5bl83+r296Tl
TLSH
T13504194AF25310FCC997C17586935B71E572FC290324ABEF2798E7351F31A819E3AA12
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

98304

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

kernel32

AreFileApisANSI DeleteCriticalSection EnterCriticalSection GetCurrentProcess GetLastError GetModuleHandleA GetProcAddress InitializeCriticalSection IsDBCSLeadByteEx IsProcessorFeaturePresent LeaveCriticalSection LoadLibraryW MultiByteToWideChar SetUnhandledExceptionFilter Sleep TerminateProcess TlsGetValue VirtualProtect VirtualQuery WideCharToMultiByte __C_specific_handler

msvcrt

___lc_codepage_func ___mb_cur_max_func __getmainargs __initenv __iob_func __set_app_type __setusermatherr _amsg_exit _cexit _commode _errno _fdopen _fmode _initterm _isatty _lock _setmode _sopen _stat64 _unlink _unlock _utime64 _write abort atexit calloc clock exit fclose feof ferror fgetc fopen_s fprintf fputc fread free fseek ftell fwrite isleadbyte localeconv malloc memcpy signal strchr strcmp strcpy strerror strlen strncmp strrchr vfprintf wcslen

libbrotlidec

BrotliDecoderAttachDictionary BrotliDecoderCreateInstance BrotliDecoderDecompressStream BrotliDecoderDestroyInstance BrotliDecoderErrorString BrotliDecoderGetErrorCode BrotliDecoderSetMetadataCallbacks BrotliDecoderSetParameter

libbrotlienc

BrotliEncoderAttachPreparedDictionary BrotliEncoderCompressStream BrotliEncoderCreateInstance BrotliEncoderDestroyInstance BrotliEncoderDestroyPreparedDictionary BrotliEncoderIsFinished BrotliEncoderPrepareDictionary BrotliEncoderSetParameter

Name

.text

Size

45KB

Virtual Size

45KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

304B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

10KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

136B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.rcd003

Size

88KB

Virtual Size

88KB

Characteristics

IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-11_a080e8acc7e31b17f69480359dd4cbdb_conti_glassworm

kernel32

msvcrt

libbrotlidec

libbrotlienc

generic