General
- Target 2026-07-18_cee3ccdedfac2049ff518c7af63883c8_glassworm_mespinoza
- Size 7.9MB
- Sample260718-mc8xvaf18j
- SHA256 f7d8ddd304d548c8767df34b04b2f3d447706404ab355f94f6891b76cc27d786
- MD5 cee3ccdedfac2049ff518c7af63883c8
- SHA1 6bab77b9497a9f2638016675b3d7f1816ad330f0
- SHA512 e2c5f8c6620d49ab691433366511780f2027655cc080dc1b63c79188fda1b00dff38ab2388b41fdccb2639d4e4ec85732b0543ae6c901e0e012f93593f5338b2
- SSDEEP 49152:zgcLW3TTHb5IFK/XReW3v8OBjiClZ99FoEstSy6FsSdSE+g5RlwXsSDCKLA1Vgbn:Ef/VdBjXZgA7flwshaw3D7nTsReRR9EB
- TLSH T12E86294677F455E5E1B7C2B489B696B1FAB2B8951C34E34F1061821F2F33AB09D2D322
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-18_cee3ccdedfac2049ff518c7af63883c8_glassworm_mespinoza.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-18_cee3ccdedfac2049ff518c7af63883c8_glassworm_mespinoza.exe
Resource
win11ltsc2024-20260710-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-18_cee3ccdedfac2049ff518c7af63883c8_glassworm_mespinoza
- Size 7.9MB
- SHA256 f7d8ddd304d548c8767df34b04b2f3d447706404ab355f94f6891b76cc27d786
- MD5 cee3ccdedfac2049ff518c7af63883c8
- SHA1 6bab77b9497a9f2638016675b3d7f1816ad330f0
- SHA512 e2c5f8c6620d49ab691433366511780f2027655cc080dc1b63c79188fda1b00dff38ab2388b41fdccb2639d4e4ec85732b0543ae6c901e0e012f93593f5338b2
- SSDEEP 49152:zgcLW3TTHb5IFK/XReW3v8OBjiClZ99FoEstSy6FsSdSE+g5RlwXsSDCKLA1Vgbn:Ef/VdBjXZgA7flwshaw3D7nTsReRR9EB
- TLSH T12E86294677F455E5E1B7C2B489B696B1FAB2B8951C34E34F1061821F2F33AB09D2D322
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Checks system information in the registry
System information is often read in order to detect sandboxing environments.