General
- Target 2026-07-17_34923a073e4a93293f8712a838c790cd_glassworm_mespinoza
- Size 7.9MB
- Sample260718-ex14qsgs2k
- SHA256 738b3d81809a95a450036ac3a8edbf7f7abc852734541d221a808e6d415655a8
- MD5 34923a073e4a93293f8712a838c790cd
- SHA1 ef32d7ac33eaf1345f6ccdf377208c0c5c06260f
- SHA512 5412713a216b098a3aae66839d315f824f3e27d03031b2555ab2221d19888b5bf359559cea5f1cff875d519c7cf228693ef7553efd5e97d7fdca6f854ac78814
- SSDEEP 49152:UhCg37+5pkPPzo6PyZtqZwHHqZ04JKeKC5y6k0LgsuYI18Wdvj56bKLASVgbKW2j:Wy0wHKHaWjqvjUhvw3D7nTsReRR9J
- TLSH T12386294677F455E5E1B7C2B489B696B1FAB2B8951C34E34F1061821F2F33AB09D2D322
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-17_34923a073e4a93293f8712a838c790cd_glassworm_mespinoza.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-17_34923a073e4a93293f8712a838c790cd_glassworm_mespinoza.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-17_34923a073e4a93293f8712a838c790cd_glassworm_mespinoza
- Size 7.9MB
- SHA256 738b3d81809a95a450036ac3a8edbf7f7abc852734541d221a808e6d415655a8
- MD5 34923a073e4a93293f8712a838c790cd
- SHA1 ef32d7ac33eaf1345f6ccdf377208c0c5c06260f
- SHA512 5412713a216b098a3aae66839d315f824f3e27d03031b2555ab2221d19888b5bf359559cea5f1cff875d519c7cf228693ef7553efd5e97d7fdca6f854ac78814
- SSDEEP 49152:UhCg37+5pkPPzo6PyZtqZwHHqZ04JKeKC5y6k0LgsuYI18Wdvj56bKLASVgbKW2j:Wy0wHKHaWjqvjUhvw3D7nTsReRR9J
- TLSH T12386294677F455E5E1B7C2B489B696B1FAB2B8951C34E34F1061821F2F33AB09D2D322
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Checks system information in the registry
System information is often read in order to detect sandboxing environments.