c926f4515f20d0438b5f55ef67527b9d71c56eb14a0db82fa6ca1fa74c62bff0

Analysis

max time kernel
149s
max time network
146s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
18/07/2026, 02:34

Target
2026-07-17_ab7bce95edb864d38d5a905b3a96cad1_glassworm_hive_snatch.exe
Size 4.9MB
Sample260718-c2ncbsdv7m
SHA256 c926f4515f20d0438b5f55ef67527b9d71c56eb14a0db82fa6ca1fa74c62bff0
MD5 ab7bce95edb864d38d5a905b3a96cad1
SHA1 1fdf697fff6bf85a3d989d82049e5cb7021596ab
SHA512 4342b0e085ae540369d324e54d5fd520256adf280512bce949814a9df032d950117bc58764beb4a479358f999f798467ccb50f8fd22e6f87db522efb16679ca8
SSDEEP 49152:iL/GX9IcnQ8/SQfzieBHQFyS9L9/z5VgkeHu:iLetRAd
TLSH
T1F3362907ABA504ECC199D135886A50127B20BC784B2323D7EA6BB5A42FF7FF05D7A714
MD5 SHA1 SHA512 SSDEEP TLSH

Score

9^/10

upx

UPX dump on OEP (original entry point) 2 IoCs

resource	yara_rule
behavioral1/memory/1656-0-0x00007FF7DA6D0000-0x00007FF7DABB4000-memory.dmp	UPX
behavioral1/memory/1656-1-0x00007FF7DA6D0000-0x00007FF7DABB4000-memory.dmp	UPX

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/memory/1656-0-0x00007FF7DA6D0000-0x00007FF7DABB4000-memory.dmp	upx
behavioral1/memory/1656-1-0x00007FF7DA6D0000-0x00007FF7DABB4000-memory.dmp	upx

C:\Users\Admin\AppData\Local\Temp\2026-07-17_ab7bce95edb864d38d5a905b3a96cad1_glassworm_hive_snatch.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-17_ab7bce95edb864d38d5a905b3a96cad1_glassworm_hive_snatch.exe"
1⤵
PID:1656

memory/1656-0-0x00007FF7DA6D0000-0x00007FF7DABB4000-memory.dmp

Download

memory/1656-1-0x00007FF7DA6D0000-0x00007FF7DABB4000-memory.dmp

Download